Save The Children International’s Ransomware Ordeal
In a concerning development, the nonprofit organization Save The Children International became the target of a ruthless ransomware gang known as BianLian. This group, active since June 2022, has a track record of focusing on critical infrastructure and healthcare institutions, holding their data hostage. While the gang didn’t directly name Save The Children, they identified the charity as the world’s leading nonprofit on the dark web, indicating it as their target. The charity later confirmed this in a statement.
The breach was substantial, with cybercriminals pilfering a staggering 6.8TB of data. This included sensitive financial records, emails, international HR files, and highly personal medical and health data. Save The Children International responded promptly, fortifying their systems and cooperating with external specialists to assess the breach’s impact.
Airbus Faces Cybersecurity Challenge
In a series of recent cyber breaches, prominent organizations have faced relentless threats, exposing sensitive information. One such victim was aerospace giant Airbus, which fell prey to a data breach affecting over 3,200 vendors. This breach included sensitive details like names, phone numbers, and email addresses.
The cybercriminal responsible, “USDoD,” has not only targeted Airbus but also plans future attacks on industry giants Lockheed Martin and Raytheon. Their previous activities involved selling the FBI’s database.
Emergence of “BreachForums” and the Airbus Breach Origin
Following the shutdown of the “Breached” forum, threat actors, including “USDoD,” shifted to “BreachForums.” In September 2023, they made significant announcements. “USDoD” revealed its membership in the “Ransomed” ransomware group, responsible for multiple attacks that month. They also detailed the Airbus data breach.
The Airbus breach originated from an employee of a Turkish airline who obtained an illegal Microsoft .NET framework copy, allowing the RedLine malware to infiltrate. This incident underscores the need for tighter restrictions on unauthorized software downloads by employees.
Soaring Threat of Info-Stealer Infections
Reports show a 6000% increase in info-stealer infections since 2018, with threat actors adopting them as the primary attack method. This surge highlights the urgency for organizations to bolster their defenses.
These recent cyber breaches emphasize the importance of robust cybersecurity measures. Whether it’s a nonprofit like Save The Children International or an industry giant like Airbus, all organizations must take cybersecurity seriously in the face of relentless cyber threats.
Disclaimer: The information provided in this article is for educational purposes only and should not be considered as legal advice. For specific compliance concerns, please consult with a qualified legal professional.
