/
attack_type:extortion × criticity:high × limpar

Resultados

8 casos · pág. 1/1

bitdefender.com · · 2 fontes · 2 atualizações high

FBI urges ShinyHunters members to surrender after Dutch arrest of alleged leader; group escalates with FBI portal breach and Cl0p extortion

The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…

haveibeenpwned.com · high

ShinyHunters extortion campaign leaks McKesson data; 6.4M email addresses added to Have I Been Pwned

In August 2026, healthcare and pharmaceutical company McKesson was targeted in a ShinyHunters "pay or leak" extortion campaign. The group published a substantial corpus of data allegedly taken from the company, including 6.4M unique email addresses alongside other personal and corporate attributes. The data relates to marketing campaign r…

krebsonsecurity.com · high

Feds suspect ransomware negotiation executives helped ShinyHunters run Shinywire extortion site after FBI jobs portal breach

U.S. federal investigators pursuing ShinyHunters, which recently stole sensitive personnel data from the FBI recruitment site fbijobs.gov, reportedly identified executives at two ransomware negotiation firms with unusually close ties to the group. One U.S. consulting firm executive is suspected of helping operate the now-defunct extortion…

hipaajournal.com · high

July 2026 US healthcare breaches: 77 incidents, 33.5M people exposed, led by ShinyHunters' DentaQuest attack

In July 2026, 77 large healthcare data breaches (500+ individuals) were reported to the HHS Office for Civil Rights (OCR), a 10% month-over-month increase and the third consecutive monthly rise. At least 33,485,970 individuals were affected, up 642% from June and 154% above the 12-month average. January-July 2026 totals 67.4 million affec…

securelist.com · high

PAYLOAD extortion group abuses domain-root GPO to disrupt a Middle East manufacturer without deploying a Windows encryptor

In April 2026, Kaspersky GERT responded to an incident at a Middle East manufacturing organization where the actor gained domain admin-equivalent control of Active Directory. The actor created and linked a malicious GPO named PAYLOAD at the domain root. It pushed ransom notes, a wallpaper and lock screen, a logon banner and a local admini…

theregister.com · high

Attackers increasingly target building automation and OT systems; French grocery refrigeration hack causes spoilage and fires

A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…

sentinelone.com · high

Weekly CTI roundup: Bitget $387M DPRK-linked heist, Pentagon DMDC breach of 3M, KillSec takedown, ex-military cybercrime sentences

This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…