Voici la sélection des cyberattaques majeures découvertes la semaine passée.
Vous retrouvez ci-dessous les liens directs vers les articles les plus intéressants. Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !
Les actus sélectionnées cette semaine
Ascension redirects ambulances after suspected ransomware attack
Ascension, a major U.S. healthcare network, is diverting ambulances from several hospitals due to a suspected ransomware attack that has been causing clinical operation disruptions and system outages since Wednesday.
Ascension Healthcare Suffers Major Cyberattack
The attack cut off access to electronic healthcare records (EHRs) and ordering systems, plunging the organization and its health services into chaos.
DocGo Confirms Cyber Attack: Hackers Steal Patients Data
DocGo Inc., a prominent healthcare and ambulance transportation service provider, has confirmed a cybersecurity incident.
Latvian TV Channels Hacked to Broadcast Russian Victory Day Parade
On Thursday, someone hacked into the system and switched the channels to show the Russian Victory Day parade instead of Latvian programs.
Europol confirms web portal breach, says no operational data stolen
Europol, the European Union’s law enforcement agency, confirmed that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after a threat actor claimed they stole For Official Use Only (FOUO) documents containing classified data.
Christie’s Website Is Brought Down by Hackers Days Before $840 Million Auctions
The auctioneer’s website was taken offline on Thursday evening and remained down on Friday, days before its spring auctions were set to begin.
North Korean Hackers Deploy New Golang Malware ‘Durian’ Against Crypto Firms
North Korean hackers have unleashed a new Golang malware called “Durian” in targeted attacks against South Korean crypto firms.
Mirai botnet also spreads through the exploitation of Ivanti Connect Secure bugs
Threat actors exploit recently disclosed Ivanti Connect Secure (ICS) vulnerabilities to deploy the Mirai botnet.
Poland says Russian military hackers target its govt networks
Poland says a state-backed threat group linked to Russia’s military intelligence service (GRU) has been targeting Polish government institutions throughout the week.
China Suspected in Major Cyberattack on UK’s Ministry of Defence (MoD)
The United Kingdom’s Ministry of Defence (MoD) is reportedly under investigation for a suspected cyberattack originating from China.
FBI Warns US Retailers That Cybercriminals Are Targeting Their Gift Card Systems
FBI warns U.S. retailers of STORM-0539 hacking group targeting gift card systems through phishing attacks, risking major consumer losses.
Boeing refused to pay $200 million ransomware demand from LockBit gang
Boeing has confirmed that it received a demand for a massive $200 million after a ransomware attack by the notorious LockBit hacking group in October 2023.
City of Wichita Public Services Disrupted After Ransomware Attack
The city was forced to shut down its IT networks and continues to investigate a major cyber incident that happened over the weekend.
Chinese Hackers Deployed Backdoor Quintet to Down MITRE
MITRE’s hackers made use of at least five different Web shells and backdoors as part of their attack chain.
LockBit Claims Wichita as Its Victim 2 Days After Ransomware Attack
The city is still investigating the attack, and neither the group nor city officials have offered details about the ransomware demands.
French lawmakers targeted by Chinese cyberattack demand sanctions, amid Xi visit
Lawmakers want security services to formally attribute the 2021 cyberattack to a Chinese hacking group.
Finland Warns Of New Android Malware Stealing Banking Logins
Watch out for harmful Finnish SMS which tricks Android device users into loading banking malware by dialing a spoofed service number.
New attack leaks VPN traffic using rogue DHCP servers
A new attack dubbed “TunnelVision” can route traffic outside a VPN’s encryption tunnel, allowing attackers to snoop on unencrypted traffic while maintaining the appearance of a secure VPN connection.
Massive webshop fraud ring steals credit cards from 850,000 people
A massive network of 75,000 fake online shops called ‘BogusBazaar’ tricked over 850,000 people in the US and Europe into making purchases, allowing the criminals to steal credit card information and attempt to process an estimated $50 million in fake orders.
British Columbia investigating cyberattacks on government networks
The Government of British Columbia is investigating multiple “cybersecurity incidents” that have impacted the Canadian province’s government networks.