#data-theft

#data-theft

BlackByte ransomware group exploits VMware vulnerabilities and uses evolving tactics to bypass security protections and gather ransom. [ more ]

Deniss Zolotarjovs has been indicted in the U.S. for cybercrimes including data theft, extortion, and money laundering since August 2021. [ more ]

Mad Liberator is a new ransomware group utilizing social engineering with Anydesk to conduct data theft and double extortion tactics. [ more ]

A Fortune 50 corporation reportedly paid $75 million to ransomware gang Dark Angels to prevent data leakage. [ more ]

The largest known ransom payment of US $75 million was made by a Fortune 50 company to the Dark Angels ransomware group. [ more ]

Account takeover (ATO) attacks have surged significantly, necessitating robust prevention strategies for businesses and individuals. [ more ]

Cthulhu Stealer targets macOS systems and is available as malware-as-a-service, highlighting rising risks for Apple users. [ more ]

Banshee Stealer is a new malware targeting macOS, capable of stealing data from various applications and designed to evade detection. [ more ]

A new threat actor, Actor240524, is targeting Azerbaijan and Israel to steal sensitive data using sophisticated phishing attacks. [ more ]

Trojan malware campaign targets Google Chrome and Microsoft Edge users with sophisticated tactics. [ more ]

Tens of thousands' data stolen from laundry giant CSC ServiceWorks due to 2023 cyberattack. [ more ]

Malware campaign installs rogue extensions via trojan masquerading as popular software.

Trojan malware distributes adware to sophisticated malicious scripts targeting private data theft.

Extensions can't be disabled by users and newer scripts disable browser updates, affecting at least 300,000 Chrome and Edge users. [ more ]

Malware campaign started in PyPI spread to GitHub infecting 100,000 repositories.

Attackers upload altered files to GitHub, cloning legitimate repos to spread malware loaders. [ more ]

A new cybercrime group named LilacSquid has been active for three years, targeting organizations in the US, Europe, and Asia with espionage-focused attacks. [ more ]

LilacSquid, a cyberespionage group, uses various tactics to compromise systems with custom malware, targeting organizations worldwide for data theft. [ more ]

Europol is investigating a cybercriminal's claims of stealing data; Europol Platform for Experts affected but no core systems compromised. [ more ]

The FCC was targeted in a phishing operation using a fake login page.

The phishing kit named CryptoChameleon targeted cryptocurrency exchange platforms and successfully collected sensitive information. [ more ]

Financially motivated threat actor UNC5537 accessed data from 165 organizations' Snowflake instances using stolen credentials and sold data to cybercriminals for various malicious purposes. [ more ]

Claxton-Hepburn Medical Center and Carthage Area Hospital have filed legal paperwork to get their stolen data back

The stolen data was found to be stored on a server owned by Wasabi Technologies in Boston, Massachusetts [ more ]

An ex-employee of the Minnesota Timberwolves was arrested for stealing sensitive internal information.

The stolen data included strategic NBA information and the executive's personal details. [ more ]

An employee of the Minnesota Timberwolves was fired, arrested, and charged with felony third-degree burglary for stealing strategic NBA information.

The Timberwolves executive, Sachin Gupta, had his personal and team-related information stolen from a hard drive left in his office. [ more ]

Patient records from Vastaamo used in extortion led to suicides.

Trial of Aleksanteri Kivimäki nearing conclusion in data theft case. [ more ]

LockBit3.0 claims to have stolen over 10 million files and 7 terabytes of medical confidentiality data from CapitalHealth.org in New Jersey.

There is no proof to support LockBit3.0's claims and Capital Health has not mentioned any extortion attempt or known group claiming responsibility. [ more ]

Long Beach officials confirmed a cybersecurity breach and data theft.

The city does not currently know what data was taken or the extent of the breach. [ more ]

The British Library has confirmed that a ransomware attack led to the theft of internal data.

The attack caused a major technology outage across the library's sites and disrupted online and on-site services.

The ransomware gang responsible for the attack has demanded over $740,000 worth of bitcoin. [ more ]

Google's Threat Analysis Group discovered and helped patch an email server flaw used to steal data from government organizations in several countries.

The exploit targeted the email server Zimbra Collaboration and stole email data, user credentials, and authentication tokens.

Updating software with the latest fixes is crucial to protect against these types of exploits. [ more ]