Ransomware Criminals

September 2, 2022

Hive ransomware group demands $2 million from Damart clothing store after ransomware attack

On Monday 15th of August 2022, Damart, a French clothing company published a message about unscheduled maintenance on the homepage of its online store. It was later revealed the unscheduled maintenance was due to Damart having to take proactive actions to contain a ransomware attack by the Hive ransomware group. The attack resulted in some of the company’s systems being […]

September 1, 2022

Government of Montenegro confirms ransomware attack, Cuba ransomware group claim responsible

On Wednesday 31st of August 2022, the government of Montenegro confirmed that ransomware was responsible for the damage and disruptions that have impacted its critical infrastructure. Public Administration Minister Maras Dukaj stated on local television that an organised cybercrime group was behind the attack. The minister was quoted saying that a “special virus” is used in the attack and there […]

August 29, 2022

Baker & Taylor, a leading library services firm confirms the ransomware attack

On Tuesday 23rd of August 2022, Baker & Taylor, a leading distributor of books to libraries around the world, confirmed that they experienced a ransomware attack which resulted in Baker & Taylor’s servers being taken down after an outage that impacted the company’s phone systems, offices, and service centres. “As an update, the source of the disruption is a ransomware […]

August 24, 2022

The attack against Bombardier RecreationalProducts claimed by the RansomEXX ransomware group

On Monday 8th of August 2022, Bombardier Recreational Products (BRP), a Canadian maker of Ski-Doo snowmobiles, Sea-Doo jet skis, ATVs, motorcycles, watercraft, and Rotax engines confirmed that they were a target of a cyber attack which resulted in Bombardier Recreational Products taking immediate measures that suspended their operations temporarily. On Monday 15th of August 2022, Bombardier Recreational Products provided an […]

August 24, 2022

Dominican Republic’s IAD disrupted by Quantum ransomware attack

It has been revealed that the Dominican Republic’s Instituto Agrario Dominicano (IAD) has suffered a Quantum ransomware attack that encrypted multiple services and workstations throughout the government agency. Reports from local media publicized that the ransomware attack occurred on Thursday 18th of August 2022. “They ask for more than 600 thousand dollars. We were affected by four physical servers and […]

August 23, 2022

French hospital sends patients elsewhere after $10M ransomware attack

On Sunday 21st of August 2022, the Center Hospitalier Sud Francilien (CHSF), a 1000-bed hospital located 28km from the center of Paris, suffered a cyberattack which has resulted in the medical centre referring patients to other establishments and postponing appointments for surgeries. The hospital’s administration has not provided further updates on the situation, and the IT system outage is still […]

August 22, 2022

LockBit’s data leak sites shut down from DDoS attack, LockBit blames Entrust for attacks

Over the weekend of the 20th of August 2022, the LockBit ransomware operation’s data leak sites have been shut down due to a DDoS attack in response to LockBit claiming responsibility for the cyberattack against Entrust that occurred in July. LockBit started to leak data that was allegedly stolen from Entrust, including legal documents, marketing spreadsheets, and accounting data. Shortly […]

August 17, 2022

BlackByte ransomware gang returns with new extortion tactics

The BlackByte ransomware operation has returned with version 2.0 of their operation which introduces a new data leak site utilizing new extortion techniques borrowed from LockBit. Since their return, the BlackByte ransomware operation has been promoting a new data leak site on hacker forums and through Twitter accounts the threat actor seems to be controlling. At the time of writing, […]

August 16, 2022

Clop ransomware group attacked UK water supplier but extorted the wrong company

On Monday 15th of August 2022, South Staffordshire confirmed that they had experienced IT disruption from a cyberattack. The released announcement explained that the safety and water distribution systems are still operational and therefore there is no impact on the supply of safe water to its customers or those of its subsidiaries, Cambridge Water and South Staffs Water. “This is […]

Hive ransomware group demands $2 million from Damart clothing store after ransomware attack

Government of Montenegro confirms ransomware attack, Cuba ransomware group claim responsible

Baker & Taylor, a leading library services firm confirms the ransomware attack

The attack against Bombardier RecreationalProducts claimed by the RansomEXX ransomware group

Dominican Republic’s IAD disrupted by Quantum ransomware attack

French hospital sends patients elsewhere after $10M ransomware attack

LockBit’s data leak sites shut down from DDoS attack, LockBit blames Entrust for attacks

BlackByte ransomware gang returns with new extortion tactics

Clop ransomware group attacked UK water supplier but extorted the wrong company

Collaboration can mitigate the effects of Ransomware Attacks

Archives

Categories

Privacy Policy

Privacy Policy

NCSC Threat Reports Feed