Security Affairs

AUGUST 13, 2020

Threat Intel firm Group-IB has released an analytical report on the previously unknown APT group RedCurl, which focuses on corporate espionage. A presumably Russian-speaking group conducts thoroughly planned attacks on private companies across numerous industries using a unique toolset. From Russia to Canada.

Cloud 363

Cloud Phishing Analytics Access 363

Data Breach Today

FEBRUARY 22, 2023

Hackers Demand Info on Victim's Cyber Insurance Policy to Negotiate Ransom Demand The newly relaunched HardBit 2.0 ransomware group is now demanding victims disclose details of their cyber insurance coverage before negotiating a ransom demand.

Insurance 267

Insurance Ransomware 267

Data Breach Today

MAY 28, 2021

Also: Debating the Issue of Banning Ransom Payments In this week's panel discussion, four editors at Information Security Media Group discuss cyber insurance, persistent ransomware attacks and whether ransom payments should be banned.

Insurance 274

Insurance Ransomware Information Security Security 274

Data Breach Today

NOVEMBER 8, 2022

A Ransomware Group Has Given Medibank 24 Hours to Pay. Who is attempting to extort Australian health insurer Medibank, why did Medibank tell its attackers it wouldn't pay a ransom and will this deter future cyber extortionists? But Medibank Says it Won't. Here are a few thoughts on the high cybercrime drama playing out.

Insurance 261

Insurance Ransomware IT 261

Security Affairs

AUGUST 7, 2019

The American group of insurance and financial services companies State Farm disclosed a credential stuffing attack it has suffered in July. The American group of insurance and financial services companies State Farm revealed that it was the victim of a credential stuffing attack it has suffered in July.

Insurance 276

Insurance Data breaches Financial Services Passwords 276

Security Affairs

OCTOBER 9, 2021

American media conglomerate Cox Media Group (CMG) was hit by a ransomware attack that took down live TV and radio broadcast streams in June 2021. The American media conglomerate Cox Media Group (CMG) announced it was hit by a ransomware attack that caused the interruption of the live TV and radio broadcast streams in June 2021.

Ransomware 309

Ransomware Insurance Encryption Passwords 309

Security Affairs

APRIL 16, 2024

The Dark Angels (Dunghill) ransomware group claims the hack of the chipmaker Nexperia and the theft of 1 TB of data from the company. The Dark Angels (Dunghill) ransomware group claims responsibility for hacking chipmaker Nexperia and stealing 1 TB of the company’s data. The chipmaker has 14,000 employees as of 2024.

Ransomware 347

Ransomware Manufacturing Insurance Cybersecurity 347

Security Affairs

MAY 21, 2021

The US insurance giant CNA Financial reportedly paid a $40 million ransom to restore access to its files following a ransomware attack. CNA Financial, one of the largest insurance companies in the US, reportedly paid a $40 ransom to restore access to its files following a ransomware attack that took place in March. Pierluigi Paganini.

Insurance 250

Insurance Ransomware Access IT 250

Security Affairs

SEPTEMBER 28, 2023

Today Johnson Controls, an ICS/SCADA vendor, confirmed they were a victim of Dark Angels ransomware group. Dark Angels claims to have have exfiltrated 27TB of sensitive data from Johnson Controls We are unfamiliar with Dark Angels ransomware group. .” reported Bleeping Computer.

Ransomware 339

Ransomware Insurance Cybersecurity Encryption 339

Security Affairs

FEBRUARY 21, 2023

Recently emerged HardBit ransomware gang adjusts their demands so the insurance company would cover the ransom cost. The HardBit ransomware group first appeared on the threat landscape in October 2022, but unlike other ransomware operations, it doesn’t use a double extortion model at this time. Very important!

Insurance 246

Insurance Ransomware Encryption IT 246

Security Affairs

AUGUST 25, 2021

The group has been active since 2016, it leverages known malware such as PUNCHTRACK and BADHATCH to infect PoS systems and steal payment card data. The activity of the group was spotted in March, after more than a year of apparent inactivity. The group also employed their BADHATCH backdoor. service. . Pierluigi Paganini.

Retail 335

Retail Insurance Cybersecurity Phishing 335

Security Affairs

SEPTEMBER 1, 2020

Iran-linked APT group Pioneer Kitten is now trying to monetize its efforts by selling access to some of the networks it has hacked to other hackers. Iran-linked APT group Pioneer Kitten, also known as Fox Kitten or Parisite, is now trying to monetize its efforts by selling access to some of the networks it has hacked to other hackers.

Access 320

Access Financial Services Retail Insurance 320

Krebs on Security

MARCH 5, 2024

healthcare giant Change Healthcare has made a $22 million extortion payment to the infamous BlackCat ransomware group (a.k.a. The ransomware group also declared it was formally removing any restrictions or discouragement against targeting hospitals and healthcare providers. There are indications that U.S. Image: Varonis.

Ransomware 357

Ransomware Insurance Government IT 357

Security Affairs

MAY 9, 2019

US DoJ indicted a member of sophisticated China-based hacking group for series of computer intrusions. The group is also responsible for the 2015 Health Insurer Anthem data breach. The group targeted at least four US companies between February 2014 and January 2015, court documents only named Anthem as one of the victims.

Insurance 254

Insurance Data breaches Phishing Privacy 254

Security Affairs

JANUARY 7, 2022

The Federal Bureau of Investigation (FBI) warns US companies that the FIN7 cybercriminals group is targeting the US defense industry with BadUSB devices. FIN7 using this technique to target businesses in the transportation and insurance industries since August 2021, while it started targeting defense firms since November 2021.

Insurance 258

Insurance Ransomware Access Security 258

Security Affairs

MAY 15, 2023

A previously unknown ransomware group known as RA Group is targeting companies in U.S. Cisco Talos researchers recently discovered a new ransomware operation called RA Group that has been active since at least April 22, 2023. The group has already compromised three organizations in the U.S. and one in South Korea.

Ransomware 246

Ransomware Encryption Healthcare Insurance 246

Security Affairs

OCTOBER 31, 2021

Irananian hacking group Black Shadow breached the Israeli internet hosting company Cyberserve, taking down several of its sites. Iranian hacking group Black Shadow compromised the server of the Israeli internet hosting company Cyberserve, taking down several of the sites hosted by the firm. Pierluigi Paganini.

Insurance 279

Insurance IT Security Data breaches 279

Data Breach Today

APRIL 13, 2021

The Latest Victim: DC Blue Cross Blue Shield Plan A recent cyberattack on a Washington-based health plan, which the company believes was carried out by a foreign cybercrime group, is the latest in a series of hacking incidents targeting health insurers.

Insurance 191

Insurance 191

Security Affairs

AUGUST 28, 2019

Recent campaigns show t hreat actors behind the Dridex and Locky malware families , the TA505 group, have updated tactics and expanded its target list. Trend Micro revealed that the TA505 group that is behind the Dridex and Locky malware families continue to make small changes to its operations. ” continues the report.

e-Delivery 255

e-Delivery Insurance Retail Government 255

Security Affairs

NOVEMBER 29, 2019

Group-IB, has analyzed key recent changes to the global cyberthreat landscape in the “Hi-Tech Crime Trends 2019/2020” report. Group-IB , a Singapore-based cybersecurity company that specializes in preventing cyberattacks, has analyzed key recent changes to the global cyberthreat landscape.

IT 306

IT Military Cybersecurity Phishing 306

Security Affairs

NOVEMBER 15, 2022

Trend Micro reported that the Earth Longzhi group, a previously undocumented subgroup of APT41, targets Ukraine and Asian Countries. The experts attributed the attacks to a new subgroup of the China-linked APT41 group, tracked as Earth Longzhi. The tool developers and campaign operators share the tools with their collaborator groups.”

Archiving 246

Archiving Passwords Metadata Insurance 246

The Last Watchdog

JULY 27, 2023

New York, NY, July 27, 2023 – QBE North America today announced the launch of a cyber insurance program with new MGA, Converge, acting as program administrator. Tom Kang, CEO, Converge, added, “We’re thrilled to partner with QBE North America given their experience and reputation in the cyber insurance market.

Insurance 188

Insurance Risk Retail Marketing 188

Data Breach Today

OCTOBER 3, 2024

Also: Prison Sentences for BEC Scammers and a West African Cybercrime Crackdown This week, AI nudify sites spread malware, BEC scammers head to prison, London man charged with hacking, and a Spanish insurance company with a breach. Also, a North Korean hacking group and a West African crackdown on online scammers.

Insurance 305

Insurance IT 305

Krebs on Security

OCTOBER 1, 2020

” As financial losses from cybercrime activity and ransomware attacks in particular have skyrocketed in recent years, the Treasury Department has imposed economic sanctions on several cybercriminals and cybercrime groups, effectively freezing all property and interests of these persons (subject to U.S.

Ransomware 363

Ransomware Insurance Risk Government 363

Security Affairs

FEBRUARY 15, 2019

Moscow police department operatives, with the participation of Group-IB experts, took down a group of phone scammers who for several years have been extorting money from the elderly. The money was used to purchase real estate, cars, collectors’ coins, jewellery and securities.

Insurance 270

Insurance Education Phishing Communications 270

Data Breach Today

OCTOBER 14, 2022

Medibank Group Says No Evidence of Data Compromise Australian health insurer Medibank Group says it has found no evidence of data compromise following its Wednesday detection of unusual network activity. The company, which serves nearly 4 million Australians, restored access to its policy websites on Friday.

Insurance 147

Insurance Access IT 147

Data Breach Today

MARCH 4, 2024

But Hospital Lobby Group Contends Funding Is 'Onerous' and 'Exceedingly' Limited Two weeks into a major cyberattack-induced outage at its Change Healthcare business, UnitedHealth Group is offering short-term financial aid to some healthcare providers whose cash flows may be running short because of the disruption in insurance payments.

Insurance 289

Insurance IT 289

Krebs on Security

AUGUST 6, 2020

A group of thieves thought to be responsible for collecting millions in fraudulent small business loans and unemployment insurance benefits from COVID-19 economic relief efforts gathered personal data on people and businesses they were impersonating by leveraging several compromised accounts at a little-known U.S.

Insurance 363

Insurance Communications Authentication Access 363

Security Affairs

MARCH 20, 2025

On September 9, 2024, the Rhysida ransomware group claimed responsibility for the security breach. The group added the company to its Tor leak site and demanded 20 Bitcoin-ransom to PSEA. The company started notifying potentially impacted individuals. At this time, PSEA was removed from the gang’s Tor leak site.

Education 158

Education Data breaches Passwords Insurance 158

Data Breach Today

SEPTEMBER 28, 2023

Also, New Malware Targets New Bitwarden Users This week: Johnson Controls suffers a ransomware attack, the Philippine state health insurance program struggles to recover from a ransomware and Air Canada reports a cyberattack. Also: an APT group uses the American Red Cross as bait and new malware targets would-be users of Bitwarden.

Ransomware 296

Ransomware Insurance 296

Security Affairs

MAY 13, 2024

Firstmac Limited disclosed a data breach after the new Embargo extortion group leaked over 500GB of data allegedly stolen from the company. They have a range of market insurance products backed by international company, Allianz Group. They have a range of market insurance products backed by international company, Allianz Group.

Data breaches 318

Data breaches Ransomware Insurance Authentication 318

Security Affairs

JANUARY 23, 2024

The Australian government announced sanctions for a member of the REvil ransomware group for the Medibank hack that occurred in 2022. The Australian government announced sanctions for Aleksandr Gennadievich Ermakov (aka GustaveDore, aiiis_ermak, blade_runner, JimJones), a Russian national who is a member of the REvil ransomware group.

Government 339

Government Insurance Ransomware Data breaches 339

Krebs on Security

MAY 23, 2020

Secret Service warned of “massive fraud” against state unemployment insurance programs , noting that false filings from a well-organized Nigerian crime ring could end up costing the states and federal government hundreds of millions of dollars in losses. Meanwhile, a number of U.S. Last week, the U.S. ” Image: Agari.

Insurance 359

Insurance Government Personal data Communications 359

Security Affairs

JANUARY 6, 2019

The Dark Overlord hacking group claims to have stolen a huge trove of documents from the British insurance company Hiscox, Hackers stole “hundreds of thousands of documents,” including tens of thousands files related to the 9/11 terrorist attacks. “What’s the takeaway? .

Insurance 280

Insurance Data breaches Sales Government 280

Security Affairs

MAY 12, 2024

In December 2023, Elliptic and Corvus Insurance published a joint research that revealed the group accumulated at least $107 million in Bitcoin ransom payments since early 2022. The researchers analyzed blockchain transactions, they discovered a clear link between Black Basta and the Conti Group. ” reads the CSA.

Ransomware 355

Ransomware Blockchain Retail Insurance 355

Security Affairs

JULY 13, 2024

The American drugstore chain giant Rite Aid suffered a data breach following a cyberattack in June conducted by the RansomHub ransomware group. The group is the third-largest drugstore chain in the United States, with over 2,000 stores, and ranked No. ” reads the announcement published by RansomHub group on its Tor Leak site.

Data breaches 343

Data breaches Ransomware Insurance Cybersecurity 343

Security Affairs

JUNE 10, 2021

Threat hunting and adversarial cyber intelligence company Group-IB published a comprehensive analysis of fraud cases on a global scale. Group-IB also unveiled Scam Intelligence, a fraud-tracking technology that paved the way for DRP, the company’s proprietary solution. million in one year .

Phishing 323

Phishing Retail Insurance Risk 323