Not all ransomware victims have given up on getting attackers to sign a nondisclosure agreement (NDA), so they can call a ransom payment a “bug bounty” and never disclose that they were the victim of a ransomware incident. At least, that’s how it seems, unless, of course, CyberOptics is going to claim that they were…
Category: Malware
Consulate Health Care chain hit by Hive
Hive ransomware gang has added another healthcare-related victim to its leak site. This time, the victim is Consulate Health Care (CHC), a chain of service providers with a troubled financial history. Enter Hive, Stage Left Hive’s listing for CHC indicates that they locked CHC’s files on December 3. Hive has already leaked some of what…
HC3: Analyst Note: Clop Ransomware
January 04, 2023 TLP:CLEAR Report: 202301041300 Executive Summary Clop operates under the Ransomware-as-service (RaaS) model, and it was first observed in 2019. Clop was a highly used ransomware in the market and typically targeted organizations with a revenue of $5 million U.S. Dollars (USD) or higher. Since its appearance, HC3 is aware of attacks on…
Bits ‘n Pieces (Trozos y Piezas)
MX: BlackCat claims attack on Grupo Estrategas EMM ALPHV, aka BlackCat, claims to have attacked Grupo Estrategas EMM, but the ransomware group has not as yet uploaded any proof of claims. Nor has the insurance firm posted any notice on its website or social media indicating any incident. The insurer has not responded to an…
UK: Schools hit by cyber attack and documents leaked
Jonathan Holmes reports: Highly confidential documents from 14 schools have been leaked online by hackers, the BBC can reveal. One of those was Pates Grammar School in Gloucestershire, targeted by a hacking group called Vice Society. The documents, seen by the BBC, include children’s SEN information, child passport scans, staff pay scales and contract details,…
AU: VIC fire service employees’ hacked details not on dark web. Update: Yet?
Rachel Ward reports: Victoria’s fire service has reassured employees their personal details have not been posted to the dark web after the organisation was hit by a cyber attack. Fire Rescue Victoria’s IT systems, including dispatch, phones and email, were affected when online criminals hacked the service in December. Read more at Kalgoorlie Miner. Update…