December 19, 2023 at 09:19AM The FBI successfully breached the ALPHV ransomware operation, obtaining decryption keys and monitoring the activities. Over 500 victims received free decryption keys. The FBI has seized the data leak site and created a free decryption tool. Affiliates are now contacting victims directly, and the operation may rebrand due to law … Read more
December 19, 2023 at 06:03AM Mortgage giant Mr. Cooper is notifying 14.7 million individuals about a recent cyberattack that resulted in the theft of personal information. The attack, identified on October 31, led to the compromise of customer data including names, addresses, Social Security numbers, and bank account numbers. Mr. Cooper has taken steps to … Read more
December 19, 2023 at 01:03AM The Play ransomware group has impacted around 300 entities and is using a double-extortion model to attack businesses and critical infrastructure globally. Ransomware attacks are increasingly exploiting vulnerabilities, leading to a rise in ransomware-as-a-service operations. The ransomware landscape continues to evolve, with emerging groups and collaboration among cybercriminals. Key takeaways … Read more
December 18, 2023 at 02:47PM VF Corp experienced a cyber intrusion, disrupting operations and order fulfillment for its major brands, including The North Face and Vans. While stores remain open and orders are accepted, fulfillment is impacted. The incident, possibly ransomware, prompted immediate containment and remediation efforts. Similar cyberattacks affected Clorox and MGM Resorts, resulting … Read more
December 18, 2023 at 01:59PM VF Corporation, a Colorado-based global apparel firm with 13 brands, including Supreme and The North Face, experienced a cyberattack on December 13, 2023, causing operational disruptions. The company is working to restore IT systems and minimize impact on retail and e-commerce operations, but the full extent and impact of the … Read more
December 18, 2023 at 05:52AM A new wave of QakBot malware phishing targeting the hospitality industry was discovered by Microsoft. The phishing campaign began on December 11, 2023, distributing a PDF with a URL leading to an MSI file. Cisco Talos had previously noted QakBot affiliates using phishing to distribute ransomware and other malware. The … Read more
December 17, 2023 at 09:27PM MongoDB issued an alert about unauthorized access to its corporate systems, exposing customer account metadata and contact information. Customers are advised to be vigilant for social engineering and phishing attacks, activate multi-factor authentication, and rotate their passwords. Critical vulnerabilities in Siemens and Unitronics PLCs and other ICS devices were also … Read more
December 17, 2023 at 04:44PM The QakBot malware, previously disrupted by law enforcement, has resurfaced in new phishing campaigns. Microsoft warns of email phishing attacks impersonating IRS employees, distributing QakBot via a malicious PDF file. The malware, initially a banking trojan, has evolved into a delivery service for ransomware attacks and data theft, using various … Read more
December 15, 2023 at 02:06PM Delta Dental of California and its affiliates are notifying 6.9 million patients of a data breach due to a vulnerability in MOVEit Transfer software. The breach resulted in unauthorized access, with stolen data including names, financial account numbers, and credit/debit card numbers. The company is offering 24 months of free … Read more
December 15, 2023 at 10:01AM Delta Dental of California has notified almost seven million patients of a data breach. The breach involved unauthorized access through MOVEit software, leading to the exposure of personal data, including names, financial account numbers, and credit/debit card details. Impacted customers are offered 24 months of free credit monitoring and identity … Read more