UK water giant admits attackers broke into system as gang holds it to ransom

January 23, 2024 at 06:57AM Southern Water suffered a cyberattack leading to data theft, including personal information of customers and employees. The Black Basta ransomware group claimed responsibility, threatening to expose more data if a ransom isn’t paid. The UK government, regulators, and the Information Commissioner’s Office have been informed. The water industry faces increasing … Read more

Russian Hackers Suspected of Sweden Cyberattack

January 23, 2024 at 06:54AM Online services at several Swedish government agencies and shops were disrupted in a ransomware attack by a Russian hacker group, impacting online purchases at cinema chains, department stores, and the national government’s human resources system. The attack affected 120 government agencies and over 60,000 employees. IT company Tietoevry estimated the … Read more

Subway Sandwich Chain Investigating Ransomware Group’s Claims

January 23, 2024 at 06:54AM Subway is investigating a claim by the LockBit ransomware group that it hacked into the company’s systems and stole extensive amounts of data, including financial information and employee salaries. The hackers have given Subway until February 2 to pay a ransom. LockBit has been a prolific ransomware group, targeting numerous … Read more

BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time

January 23, 2024 at 06:06AM Conor Brian Fitzpatrick, creator of cyber crime marketplace BreachForums, has been sentenced to time served with 20 years of supervised release. Arrested in 2023 for various charges, including child pornography possession, Fitzpatrick operated a platform trafficking stolen data affecting millions. Due to mental health concerns, he will undergo treatment and … Read more

Cracked macOS apps drain wallets using scripts fetched from DNS records

January 22, 2024 at 05:31PM Hackers are utilizing a covert approach to disseminate information-stealing malware to macOS users via DNS records. The campaign targets macOS Ventura and later users, leveraging cracked applications containing a trojan. Victims unknowingly execute the malware, granting it access to their system and potentially compromising sensitive data. Kaspersky’s findings underscore the … Read more

Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

January 22, 2024 at 03:51PM AerCap, the world’s largest aircraft leasing company, reported a ransomware infection on January 17. Despite the intrusion by the Slug ransomware crew, the company claims to have not incurred financial losses. LoanDepot also disclosed a ransomware attack, affecting about 16.6 million individuals, prompting an ongoing investigation and restoration efforts. From … Read more

Ivanti: VPN appliances vulnerable if pushing configs after mitigation

January 22, 2024 at 01:27PM Ivanti advises administrators to refrain from pushing new device configurations to appliances after applying mitigations as it renders them defenseless against ongoing attacks exploiting two zero-day vulnerabilities. There have been large-scale attacks targeting Ivanti ICS and IPS appliances, with companies issuing mitigation measures and recovery instructions. Thousands of exposed appliances … Read more

loanDepot says ransomware gang stole data of 16.6 million people

January 22, 2024 at 11:02AM Mortgage lender loanDepot confirmed a ransomware attack resulting in the theft of personal information from approximately 16.6 million people. The incident led to system shutdowns, impacting payments and online portals. The company is offering free credit monitoring and identity protection services to affected individuals. The attack highlights the risks of … Read more

Subway’s data torpedoed by LockBit, ransomware gang claims

January 22, 2024 at 09:08AM LockBit ransomware gang claims to have breached Subway’s database, accessing sensitive financial data. Subway has yet to respond publicly but is investigating the allegations. LockBit demands Subway to protect the data or face a potential sale to competitors. The ransomware gang may seek tens of millions of dollars, and Subway’s … Read more

Owner of Cybercrime Website BreachForums Sentenced to Supervised Release

January 22, 2024 at 07:18AM Owner of cybercrime website BreachForums, Conor Brian Fitzpatrick, is sentenced to time served and 20 years supervised release for conspiracy to commit device fraud, access device fraud, and possession of child pornography. Despite a recommendation of 188 months in prison, he’ll serve first 2 years under home arrest, with restrictions … Read more