yaracroft @venom@nanao.cybtex.fr

TTEC, [NASDAQ: TTEC], a company used by some of the world's largest brands to help manage customer support and sales online and over the phone, is dealing with disruptions from a network security... #ransomware

https://krebsonsecurity.com/2021/09/customer-care-giant-ttec-hit-by-ransomware/

Les RSSI doivent plus que jamais s'attendre cette année à ce que les rançongiciels ciblent plus agressivement les infrastructures #cloud. #ransomware #threats

https://www.silicon.fr/avis-expert/rancongiciel-3-0-le-scenario-de-cyberattaque-le-plus-redoute-des-rssi

Le groupe #coomingproject revendique une attaque #informatique contre l'agence spatiale nationale sud-africaine (sansa.org.za) #ransomware

https://www.heuredujournal.com/panne-informatique-a-la-bmci-rien-ne-va-plus/

L'Université Howard (home.howard.edu) annonce avoir annulé les cours suite à une attaque #informatique de type #ransomware #usa #education

https://www.zdnet.com/article/howard-university-announces-ransomware-attack-shuts-down-classes-on-tuesday/

Gardaí have seized cyber infrastructure used by the gang involved in the HSE #cyber attack earlier this year #ransomware

https://www.irishtimes.com/news/crime-and-law/gardaí-seize-infrastructure-from-hse-cyber-attack-gang-1.4665454

Investigation into recent attacks by a #Conti affiliate reveals that that the attackers initially accessed targeted organizations' networks with ProxyShell, an exploit of vulnerabilities in #Microsoft Exchange that have been the subject of multiple critical updates over the past several months. #ransomware

https://news.sophos.com/en-us/2021/09/03/conti-affiliates-use-proxyshell-exchange-exploit-in-ransomware-attacks/

#BlackMatter #Ransomware v2.0

https://chuongdong.com/reverse%20engineering/2021/09/05/BlackMatterRansomware/

Les systèmes informatiques de la Société de transport de l'Outaouais (sto.ca) paralysés suite à une attaque #informatique #canada #ransomware

https://ottawa.ctvnews.ca/sto-targeted-by-cyberattack-1.5574455

Bangkok Airways investigating a #cyber attack in which some customers' personal data may have been compromised #thailand #lockbit #ransomware

https://www.bangkokair.com/press-release/view/clarifies-the-incident-of-a-cybersecurity-attack

A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called « intermittent encryption ». Called LockFile, the operators of the ransomware has been found exploiting recently disclosed flaws such as ProxyShell and PetitPotam to compromise #Microsoft #Windows servers and deploy file-encrypting #malware that scrambles only every alternate 16 bytes of a file, thereby giving it the ability to evade #ransomware defences.

https://thehackernews.com/2021/08/lockfile-ransomware-bypasses-protection.html

A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called « intermittent encryption ». Called LockFile, the operators of the ransomware has been found exploiting recently disclosed flaws such as ProxyShell and PetitPotam to compromise #Microsoft #Windows servers and deploy file-encrypting #malware that scrambles only every alternate 16 bytes of a file, thereby giving it the ability to evade #ransomware defences.

https://thehackernews.com/2021/08/lockfile-ransomware-bypasses-protection.html

ROC Mondriaan (rocmondriaan.nl) educational institute victim of a serious #cyber attack. ROC Mondriaan has 26 branches in The Hague, Delft, Leiden and Naaldwijk. The MBO group has more than 20,000 students and more than 2,100 employees in the approximately 240 study programmes #education #ransomware

https://www.cybercrimeinfo.nl/cybercrime/727722_onderwijsinstelling-roc-mondriaan-in-den-haag-slachtoffer-van-grote-cyberaanval

A healthcare ransomware attack occurred on June 25, 2021 resulted in potential exposure of the PII & PHI of over 48k individuals at Indiana-based CarePointe ENT (carepointe.net) #ransomware

http://carepointe.net/wp-content/uploads/2021/08/Data-Security-Incident.pdf

🇨🇭 La municipalité de Rolles « regrette d'avoir sous-estimé la gravité de l'attaque #informatique, le potentiel de l'utilisation des données et l'importance de la transparence pour la population. Elle reconnaît avec humilité une certaine naïveté » #swiss #sagesse #suisse #ransomware

hhttps://www.letemps.ch/economie/apres-piratage-massif-rolle-admet-naivete

#Nokia SAC Wireless (sacw.com) #conti #ransomware

https://s3.documentcloud.org/documents/21047756/sac-wireless-data-breach-conti-ransomware-bc-notification-letter.pdf

Contrairement à ce que la commune vaudoise avait affirmé, les données de plus de 5000 habitants à Rolle sont en ligne à la suite d'une infection par #ransomware. Rapports d'évaluation des employés, demandes d'exonération fiscale, arrangement fiscal de la part d'une multinationale ou même les notes des élèves sont accessibles sur le darknet #swiss #suisse

https://www.letemps.ch/economie/exclusif-piratage-rolle-beaucoup-plus-grave-quannonce

La société brésilienne d'habillement, d'accessoires de mode et des cosmétiques Lojas Renner S.A (lojasrenner.com.br) frappée par un #ransomware #brazil #brésil

https://thehack.com.br/urgente-lojas-renner-podem-ter-sido-vitimas-de-ransomware-site-sai-do-ar/

#DarkSide & #BlackMatter v2.0 Config Extractor #ransomware

https://github.com/advanced-threat-research/DarkSide-Config-Extract

Vice Society a publié mercredi 18 août 2021 sur son site de revendication le nom d'une nouvelle victime de son #ransomware : le Centre Hospitalier Joseph-Imbert à Arles (ch-arles.fr). Les opérateurs menacent de publier des données siphonnés si la rançon n'est pas prochainement versée #france #santé #covid #vicesociety #cnil #rgpd

https://www.leparisien.fr/high-tech/le-centre-hospitalier-darles-touche-par-un-virulent-ransomware-en-pleine-vague-de-covid-19-19-08-2021-KR5RYUTAMRDLDGYHCHTM6QVH3M.php

Une partie des systèmes informatiques du Gymnase intercantonal de la Broye (gyb.ch) impactée par une attaque #informatique perpétrée le 6 août 2021 #suisse #ransomware

https://www.lematin.ch/story/le-gymnase-de-la-broye-victime-dune-cyberattaque-606359483681