Tag Archive for: claims

Ukraine Claims Revenge Hack Against Moscow Internet Provider

/in


Sources reportedly tipped off Ukraine media to a cyberattack launched this week by the Blackjack cyber group, linked to the Security Service of Ukraine (SBU), that they claim was able to “destroy” the servers of Moscow Internet service provider M9 Telecom.

The ISP’s website was operational on Jan. 9.

Unnamed sources told state-run Ukrainian media outlet Ukrinform that the cyber operation was in retaliation for the Russia-backed breach of Kyivstar mobile phone operator Dec. 12, which caused communications blackouts across Ukraine. The source reportedly added the M9 Telecom cyberattack was just a “warm up” for more “serious revenge for Kyivstar.”

The Blackjack cyber group likewise claimed credit for the late December breach of Moscow’s Rosvodokanal water utility, which the group claimed it was able to pull off with the help of the SBU.

Earlier this month, the SBU’s cyber chief, Illia Vitiuk, warned that Russia’s compromise of Kyivstar, a modern, private company should signal to Western countries that nothing is beyond the reach of sophisticated Russian cyber threats.

Source…

Ukrainian hacking group claims retaliatory cyber-strike on major Moscow ISP

/in


Hackers from the Blackjack group, allegedly affiliated with Ukraine’s SBU security service, have hacked into Moscow’s M9com internet provider and demolished its servers, informed sources told NV on Jan. 9.

The attack concerns 20 terabytes of deleted data: the company’s official website, branch websites, mail server, cyber security services, etc.

Read also: Ukrainian hackers leak personal data of 38 million clients of Russia’s Alfa-Bank

“As a result, some Moscow residents were left without internet and TV,” the sources said.

“The hackers also downloaded more than 10 GB of data from the company’s mail server and client databases, which they made available for anyone to examine.”

Source…

INC RANSOM ransomware gang claims to have breached Xerox Corp

/in


INC RANSOM ransomware gang claims to have breached Xerox Corp

Pierluigi Paganini
December 30, 2023

The INC RANSOM ransomware group claims to have hacked the American multinational corporation Xerox Corp.

Xerox Corp provides document management solutions worldwide. The company’s Document Technology segment offers desktop monochrome and color printers, multifunction printers, copiers, digital printing presses, and light production devices; and production printing and publishing systems for the graphic communications marketplace and large enterprises.

The INC RANSOM ransomware group claims responsibility for hacking the American multinational corporation Xerox Corp and threatens to disclose the alleged stolen data.

The INC RANSOM group added Xerox to the list of victims on its Tor leak site.

Xerox Corp

The ransomware group published the images of eight documents, including emails and an invoice, as proof of the hack.

At this time it’s unclear which is the volume of data allegedly stolen from the company.

The INC RANSOM has been active since 2023, it claimed responsibility for the breach of more than 40 organizations to date.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, data breach)

Source…

Hunters International ransomware gang claims to have hacked the Fred Hutch cancer center

/in


Hunters International ransomware gang claims to have hacked the Fred Hutch Cancer Center

Pierluigi Paganini
December 16, 2023

The Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch).

Another healthcare organization suffered a ransomware attack, the Hunters International ransomware gang claims to have hacked the Fred Hutchinson Cancer Center (Fred Hutch).

The ransomware gang has added the organization to its dark web leak site and is threatening the victim to leak the alleged stolen data.

Fred Hutchinson Cancer Research Center is an independent, nonprofit research institute based in Seattle, Washington. Its mission is to improve the lives of people worldwide through research, clinical care and education.

The center’s research focuses on cancer prevention, diagnosis, treatment and survivorship. Fred Hutch investigators are making groundbreaking discoveries in cancer genomics, immunotherapy, precision medicine and other fields.

The organization operates a network of clinical sites in the US.

Earlier in December, Fred Hutch disclosed a cyber attack that took place on November 19, 2023. Threat actors had access to its infrastructure.

The Seattle Times reported that Fred Hutch patients started receiving email threats following cyberattack.

“Then this week, the spam emails started to arrive. The threats were sent to a number of former and current Fred Hutch patients — as well as some who have received care from Hutch partner UW Medicine — and claimed the names, Social Security numbers, phone numbers, medical history, lab results and insurance history of more than 800,000 patients had been compromised.” reported the Seattle Times.

“If you are reading this, your data has been stolen and will soon be sold to various data brokers and black markets to be used in fraud and other criminal activities,” the alleged hackers wrote, according to several emails shared with The Seattle Times.”

Fred Hutch
Robert M. Arnold Building, Fred Hutchinson Cancer Research Center.

The organization immediately started the incident response procedure, it took impacted systems offline, a circumstance that suggests that Fred Hutch was the…

Source…