#RansomwareAttack

New Eldorado ransomware targets Windows, VMware ESXi VMs

by

July 5, 2024 at 11:57AM A new ransomware-as-a-service (RaaS) called Eldorado has emerged, targeting both Windows and Linux platforms. The ransomware aims to encrypt files and extort victims. Group-IB researchers have noted the malware’s capabilities and provided defense recommendations, including implementing multi-factor authentication, utilizing endpoint detection, taking regular backups, educating employees, and refraining from paying … Read more

Ransomware scum who hit Indonesian government apologizes, hands over encryption key

by

July 4, 2024 at 02:01AM Brain Cipher, the group behind the hacking of Indonesia’s Temporary National Data Center, has apologized and released an encryption key to the government. The key was a 54 kb ESXi file, with its effectiveness yet to be confirmed. The group shared its motive, claiming to act as penetration testers and … Read more

300k Affected by Year-Old Data Breach at Florida Community Health Centers

by

July 3, 2024 at 08:41AM almost 300,000 individuals were affected by a ransomware attack at Florida Community Health Centers in June 2023, compromising personal and health information. FCHC is providing impacted individuals with 12 months of complimentary credit monitoring and identity theft protection services. The incident was disclosed to the Maine Attorney General’s Office and … Read more

Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

by

July 3, 2024 at 08:41AM Patelco Credit Union, serving 500,000 customers, faced a ransomware attack, impacting its online banking, mobile app, and call center. Electronic transactions are unavailable and restoration efforts are ongoing. Patelco emphasized secure system restoration, cooperation with cybersecurity experts, regulators, and law enforcement. Customer reimbursement for late payment fees is assured. Based … Read more

South Africa National Healthcare Lab Still Reeling from Ransomware Attack

by

July 3, 2024 at 03:03AM The South African National Health Laboratory Service (NHLS) continues to recover from a ransomware attack, causing disruptions in lab testing and access to test results. This adds pressure to the already strained healthcare system, potentially leading to more infections and worsened health outcomes. The government and organizations must enhance cybersecurity … Read more

Fintech Frenzy: Affirm & Others Emerge as Victims in Evolve Breach

by

July 2, 2024 at 05:30PM A ransomware attack on a financial services provider has reverberated across its partners, leading to potential exposure of customer data. The attack, launched by the LockBit group, targeted Evolve Bank & Trust, compromising customer information. This has rippled through multiple companies, including Wise and Affirm, prompting investigations and concerns among … Read more

Patelco shuts down banking systems following ransomware attack

by

July 2, 2024 at 01:51PM Patelco Credit Union, with assets exceeding $9 billion and serving over 400,000 members, disclosed a ransomware attack, resulting in the shutdown of customer-facing banking systems. Services impacted include online banking, transactions, and call center support. Recovery efforts are ongoing, with no definitive timeline provided. Clients are urged to stay vigilant … Read more

Affirm admits customer info pwned in ransomware raid at Evolve Bank

by

July 2, 2024 at 09:23AM The breach at Evolve Bank & Trust has impacted its partners Wise and Affirm, with personal data of Affirm Card holders potentially stolen. The scale of the breach is still unclear, and Wise confirmed that some of its users may have been affected. Evolve faces additional scrutiny due to previous … Read more

Prudential Financial now says 2.5 million impacted by data breach

by

July 1, 2024 at 05:24PM Prudential Financial disclosed a data breach compromising the personal information of over 2.5 million people. The breach, attributed to the ALPHV/Blackcat ransomware gang, was detected on February 5, 2024. In an updated report to the Maine Attorney General’s Office, the company confirmed that the breach impacted 2,556,210 individuals. The investigation … Read more

CDK Global says all dealers will be back online by Thursday

by

July 1, 2024 at 03:24PM CDK Global aims to restore access to its dealer management system and other applications following a ransomware attack. The attack caused widespread outages, forcing car dealerships to resort to manual processes and prompting CDK to take down its IT systems. The attacker, BlackSuit ransomware gang, is now negotiating with CDK … Read more