Threat Actor: Unknown Victim: Mexican Government Information: π Unauthorized domain administrator access to a prominent entity within the Mexican government. π Access extends to more than 1000 employee accounts, including domain administrator and enterprise-level credentials. π The compromised syste…
Tag: DARK WEB
AT&T confirmed that a data breach impacted 73 million current and former customers after its data were leaked on a cybercrime forum. In March 2024, more than 70,000,000 records from an unspecified division of AT&T were leaked onto Breached forum, vx-underground researchers reported. The researchers confirmed that the leaked data is legitimate, however, it is […]
Threat Actor: Unknown Victim: Windows users Information: π The threat actor is offering a Windows 1-day Local Privilege Escalation (LPE) exploit for sale. π The exploit is identified as CVE-2024-26169 and is categorized as a Windows Error Reporting Service Elevation of Privilege Vulnerability. π The…
Threat Actor: Unknown Victim: Enel DistribuciΓ³n PerΓΊ Information: π The threat actor claims responsibility for leaking a database from Enel DistribuciΓ³n PerΓΊ. π The attack allegedly occurred in March 2024. π The leaked data includes sensitive household information. π The compromised data consists of…
Threat Actor: Unknown Victim: St Jude Laboratories Information: π Threat actor claims responsibility for leaking patient data from St Jude Laboratories π Compromised data includes full name, address, phone number (home/work), DOB, full SSN, and other confidential information π Size of the compromise…
Threat Actor: “Unknown threat actor” Victim: N/A Information: π The threat actor is offering the Malware Service of ACR Stealer for sale. π The ACR Stealer is developed in C++ and supports Windows 7-10 + servers. π It utilizes its own spacer servers and offers the option for personal installation. π…
Threat Actor: Pharanos Cyber Army (PCA) Victim: Ukrainian Government-Controlled Systems Information: π PCA claims to have successfully breached a system operated by private companies and ISPs within Ukraine. π The Ukrainian government is allegedly engaging in surveillance of its citizens. π The Ukra…
Threat Actor: Just Evil Victim: UK Defense Personnel employed by BAE Systems Information: – π Just Evil hacking collective claims to have access to sensitive data from UK defense service personnel. – π The group allegedly obtained personal information such as resumes, certifications, and job roles….
Summary : UnitedHealth Group has admitted that patient data was taken in a mega attack, leading to a significant breach of sensitive personal, financial, and health information. Key Point : β The U.S. Department of State is offering a reward of up to $10 million for information on the ransomware gro…
Threat Actor: – Cyber_589 Victim: – Karabuk University Information: – π» The threat actor, Cyber_589, claims to have breached the student and teacher information system login panel of Karabuk University. – πΌ The leaked database allegedly contains sensitive information such as identification details,…
Threat Actor: π Victim: π’ Information: – The threat actor is offering unauthorized access to a prominent American architecture & design company. – The company has a revenue of $90+ million and employs over 400 people. – The company utilizes Sentinel EDR and offers access to Citrix, Fortinet VPN, RDP…
Threat Actor: π₯ Victim: π― Information: – The threat actor is offering the source code of AvEleminator software for sale. – AvEleminator is a tool designed for malicious purposes, aiming to neutralize antivirus, endpoint protection platforms, and endpoint detection and response security software. – T…
Slovenia Targeted by Cyber Attacks Amidst Growing Tensions Over Support for Ukraine – Daily Dark Web
Threat Actor: – Unknowns group – CyberDragon group – Cyber Army of Russia group Victim: – Government of Slovenia – NLB (largest commercial bank in Slovenia) – Chamber of Commerce and Industry Information: – The Unknowns group is believed to be behind the series of disruptive DDoS attacks targeting k…
Summary: Apps found on Google Play are turning devices into proxy network nodes without users’ knowledge, posing a security risk. Key Point: π Apps with hidden proxy network functionality are being removed from Google Play. π The LumiApps SDK is used to enroll devices in a residential proxy network….
Summary : Municipalities in Texas and Georgia are facing disruptions in services due to ransomware attacks. Key Point : π Gilmer County in Georgia is experiencing a ransomware attack affecting services for its residents. π Fulton County in Georgia is still restoring critical services after a ransomw…