Tracks cyberattacks, data breaches, compromised organizations, leaked data, and other security incidents
2317 articles
The hacktivist group Edalat-e Ali claimed responsibility for accessing Evin Prison’s CCTV and leaking videos and documents. DarkOwl also found a low-cost CCTV exploit for sale on a darknet marketplace, but could not confirm it was used in the prison attack.
A scammer impersonating the IRS used an urgent email and follow-up phone call to persuade a college student to buy $10,000 in Apple gift cards. An Uber driver intervened, but the funds had already been spent.
A March 10, 2020 hack of Daniel Winzen’s Tor hosting service took more than 7,500 hidden services offline. Winzen said attackers deleted its databases and advised users to treat data as leaked and passwords as compromised.
Huntress says a dark-web seller offered access to a U.S. MSP for $600 BTC, claiming phishing credentials provided access to accounts and customers. Researchers identified and alerted the MSP; a later update linked the seller handle to a former employee.
As Dream Market announced a move to a new URL after DDoS attacks, vendors alleged support tickets tricked them into sharing passwords and bitcoin addresses, leading to account lockouts and lost funds. The market has not confirmed the claims.
A breach of Daniel Winzen’s hosting service led to database deletions and an estimated 6,500 Tor and I2P hidden services going offline. The attacker and motive remain unknown.
An entity claiming to be TheDarkOverlord advertised more than 67,000 healthcare records from practices in three states and 131,000 records from an unnamed gaming site for sale on Kickass Forum. The claims were unverified.
Huntress and partner SinglePoint Global report finding Emotet on 99 of 120 client machines. The article describes the malware’s persistence and spread, the response, and advice on unique administrator passwords and least privilege.
An MSP found that attackers had brute-forced a customer’s MSSQL administrator password, installed backdoors and persistence, and downloaded post-exploitation tools. The team contained the compromise before business disruption.
A Huntress author reported an unauthorized ticket purchase through a StubHub account linked to PayPal. The author says PayPal refunded the charge and describes weak account-verification practices when contacting StubHub by phone.
Fusion Superplex says a cybersecurity incident temporarily affected some systems. Online ticketing is offline during recovery, while the venue remains open and tickets are available at the box office.
Itron said an unauthorized third party accessed some corporate systems. The company contained the activity, notified law enforcement and said operations continued; its investigation is ongoing, with no material impact currently expected.
Pierrefitte-sur-Loire says a cyberattack on its hosting provider temporarily made the municipality’s website unavailable. Technical teams are working to restore access.
