Ravie Lakshmanan reports: An “aggressive” financially motivated threat actor has been identified as linked to a string of RYUK ransomware attacks since October 2018, while maintaining close partnerships with TrickBot-affiliated threat actors and using a publicly available arsenal of tools such as Cobalt Strike Beacon payloads to interact with victim networks. Cybersecurity firm Mandiant attributed…
Search Results for: education
Manhasset School District Victim of Ransomware?
Frank Rizzo reports: Manhasset School District Acting Superintendent of Schools Gaurav Passi, at the Oct. 7 board of education meeting, said that the district may have been the victim of ransomware. “At this time we can confirm that we have discovered ransomware in our system,” Passi said. “And that the malicious actor—or threat actor, as…
Council on Aging of Southwestern Ohio notifies clients after employee email account compromsed
As I commented this week: protected health information or medical information can be found in so many breaches involving entities that may not sound “medical” to you. Today, this site is posting two such notifications. Here’s the first. BLUE ASH, OHIO, September 24, 2021 – On July 27, 2021, Council on Aging of Southwestern Ohio (COA) experienced…
VA: Greensville County Public Schools hit by Grief threat actors
Grief threat actors have added another k-12 district to their list of victims who have refused to pay their ransom demands. Greensville County Public Schools in Emporia, Virginia was added to Grief’s dark web leak site on September 21. But by September 15, the district had already disclosed that they were dealing with a cyberware…
Responding to a CBS story on Palos Community Consolidated School District 118
On August 10, DataBreaches.net reported on several school districts hit by ransomware attacks. One of the districts discussed in that report was Palos Community Consolidated School District 118 in Illinois. In that section of the report, DataBreaches.net summarized some of the personnel and student data we had found in the threat actors’ data dump: There…
ALTDOS claims to have hacked one of Malaysia’s biggest conglomerates
Threat actors known as ALTDOS continue to romp their way through attacks on ASEAN entities, garnering very little media attention as they acquire and dump millions of consumer records and proprietary information on businesses. The majority of the victims whose data they have dumped appear to be from Singapore and Thailand, but they do have…