Weekly Cybersecurity Report | Week 33, 2024

As your dedicated cybersecurity services provider, Cyberone equips you with timely and in-depth information about current cyber attacks. Discover a weekly cybersecurity report of the latest exploits and breaches shaping the ever-evolving cybersecurity landscape.

Weekly Cybersecurity Report | Week 33, 2024

Information security updates and events from the past week 

1 – Trump’s election headquarters claims: Iranian hackers managed to break into the email accounts of senior officials at the headquarters and stole documents in order to interfere in the US elections. 

The Politico website was the first to report the incident after an anonymous source started sending them the documents he stole. 

2 – For the second time in a year – McLaren Hospital in Michigan reports the shutdown of telephone and computing systems due to a ransomware attack. 

The hospital states that following the attack they had to cancel some of the non-urgent surgeries and appointments. 

The INC ransom group is the one apparently responsible for the attack. 

Reminds that at the end of September 2023 the hospital suffered another ransomware attack, so this is the second attack in less than a year. 

3 – The AutoCanada vehicle agency reports disruptions in activity due to a cyber-attack. 

The company, which operates 65 branches and employs approximately 4,700 people, reports that due to the attack they are forced to disable some of the computer systems. 

The company does not specify the nature of the attack, but it is likely that it is a ransomware attack. 

AutoCanada was one of the companies that was hit as part of the CDK ransomware attack that took place a few weeks ago. The company suffered extensive disruptions following the attack on CDK and recorded losses of $33 million in the last quarter compared to profits of $45 million in the corresponding quarter last year. 

4 – The Swiss company Schlatter Group reports that it is suffering from a ransomware attack. 

According to the company, which manufactures various industrial machines, the attack caused disruptions in the computer and email systems. 

At this point, no attack group has claimed responsibility for the attack. 

5 – The company Orion S.A., which is engaged in the production of chemicals for various industries, reports to the US stock exchange that it fell victim to a fraud in which an employee of the company made transfers of funds to unknown parties in the amount of 60 million dollars 

The company states that following the transfers it will recognize a loss of 60 million dollars and will do everything in its power to return the funds or cover the loss (with the help of insurance, etc.). 

Reminds me that just a few days ago I reported a similar fraud in the amount of 42 million dollars, but there the event ended in a relatively good way. 

6 – The Australian mining company Evolution Mining reports that the company’s computer systems were affected by a ransomware attack. 

The company reported the attack to the state stock exchange, stating that it managed to contain the attack but did not report whether it paid the ransom or not. 

At this point, no attack group has claimed responsibility for the attack. 

7 – Hacking of one of Netflix’s suppliers led to leaking information of series and movies before the official release date 

The leaked episodes were published on social networks and torrent when they are of low quality and include watermarks, but this is a significant leak of information for Netflix. 

Among the leaked series is also the second season of the anime series Arcane, one of the successful and award-winning series of Netflix, which was to be released in November this year. 

According to reports on the network, the list of series and movies leaked so far includes: 

– Arcane Season 2 

– Dandadan 

– Ranma 1/2 

– Terminator Zero 

– Spongebob Movie 

– Mononoke Movie 

In addition, it stated that the attack did not have a material impact on its activities, and its systems remained fully operational and that no material impact on the financial situation or the result of the activity is expected.

 

The attacks highlighted in this report aren’t just incidents, they’re blueprints of the adversary’s arsenal. To protect your business you need the right partner. Cyberone is here to help! Check out our services.