A large-scale Azure exfiltration campaign has exposed millions of employee records from major enterprises after a threat actor known as âTheHatmanâ allegedly used compromised credentials to access Azure/Entra tenants. The leaked directory data from companies including McDonaldâs, Vodafone, TCS, HCL Technologies, IHG, and Kyndryl could enable spear-phishing, business email compromise, and privilege escalation attacks. #TheHatman #Azure #Entra #McDonalds #Vodafone #TCS #HCLTechnologies #IHG #Kyndryl
Chainalysisâ 2025 Crypto Crime Report shows that crypto crime became more diversified and professionalized in 2024, with stablecoins dominating illicit volume while ransomware, scams, stolen funds, sanctions activity, and organized crime all shifted in response to enforcement and market changes. The report highlights major themes such as North Korean hacking, Huione Guaranteeâs role in laundering and scam infrastructure, rising AI-enabled fraud, and the continued investigative advantage of blockchain transparency. #Chainalysis #HuioneGuarantee #LockBit #TornadoCash #Garantex #DMMBitcoin #WazirX #RansomHub #Akira #Fog #EvilCorp #GazaNow #SmartBusinessCorp #AbacusMarket #KrakenDNM #Cryptex #UAPS #PM2BTC #DPRK #Garantex
Arnall Golden Gregory in the US was targeted by the Qilin ransomware threat actor, which encrypted files and disrupted normal operations. The incident is attributed to Qilinâs ransomware activity against the organization, impacting operations in #UnitedStates
Qilin ransomware, claimed to have impacted Jone Pr,Ă©cision in France, encrypting files and disrupting operations. Victim = Jone Pr,Ă©cision, Threat Actor = qilin; impacted country(s): #France
Zanichelli in Italy reported a ransomware incident attributed to the qilin threat actor. The attack resulted in system disruption and data encryption affecting operations in #Italy
A single defacement incident is reported, targeting Indonesia via https://diskopukm.sulutprov.go.id/nxc_ajdfi03c.txt. The attacker involved was Simsimi. #Indonesia…
Se reportĂł que el ransomware afectĂł a servmarmg.cl en Chile, atribuido al Threat Actor ms13089, con un impacto directo en sus operaciones. Empresa con mĂĄs de 25 años de experiencia en el rubro marĂtimo, orientada a ejecutar operaciones con estĂĄndares de calidad, control de riesgo y tiempos de respuesta consistentes. #Chile
DXS International in GB reported a direwolf ransomware incident affecting its healthcare operations. The attackers encrypted or threatened to expose data, disrupting services and potentially impacting patient care in #UnitedKingdom
PayrHealth, a US healthcare organization, was targeted by the direwolf ransomware threat actor, resulting in encrypted data and disruption of healthcare operations. The incident caused impacts across the healthcare environment in #UnitedStates
Colla Health, a healthcare organization in the US, reported a ransomware incident attributed to the direwolf threat actor, resulting in disruption to its operations and potential exposure of sensitive data. The impacted country is: #UnitedStates
impacket-smbexec is a flexible Impacket tool that provides remote command execution over SMB on Windows systems, supporting plaintext passwords, NTLM hashes, Kerberos tickets, and AES keys. The article explains its major options, practical usage examples, and defensive measures such as monitoring service creation and restricting privileged access. #Impacket #smbexec #LAPS #SMBSigning
AAM:HOA Management, a US-based HOA management organization, was targeted by the direwolf ransomware group, with the attackers seeking to disrupt operations and force ransom payment. The incident impacted the United States #UnitedStates
DodoPayments in India reported that direwolf ransomware encrypted its financial software systems, disrupting operations and access to critical payment data. The incident affected India #India
RapidFort, a US organization, reported a ransomware incident attributed to the xpl0itrs threat actor, highlighting risks introduced through the software supply chain. The attack underscores weaknesses in third-party and dependency security practices that can lead to rapid compromise and data disruption in the impacted environment. #UnitedStates
xpl0itrs used ransomware to compromise School management software used by *********, disrupting operations and threatening data exposure. The impacted country(s) are: #countryname