Major Cyber Attacks, Data Breaches, Ransomware Attacks in October 2023

• 08 November, 2023
• No Comments

Major Cyber Attacks, Data Breaches, Ransomware Attacks

In contemporary times characterized by digital advancements, the proliferation of cyber attacks, data breaches, and ransomware has arisen as significant and difficult challenges that affect individuals, businesses, and governments alike. These malevolent behaviors not only jeopardize confidential information but also hinder operations, resulting in substantial financial ramifications and reputational harm. This article explores many significant cyber attacks, emphasizing the gravity of these risks and the imperative for strong cybersecurity protocols.

Ransomware Attacks in October 2023

Based on the findings of our investigation, it has been determined that during the month of October 2023, a total of 114 security events were publicly published. These incidents resulted in the compromise of approximately 867,072,315 records. Consequently, the cumulative number of compromised records for the year has surpassed the significant milestone of 5 billion.

Data Breaches in October 2023

October’s three biggest breaches were:

1. i) ICMR Indian Council of Medical Research: 815,000,000 breached records

1. ii) 23andMe: 20,000,000 breached records

iii) Redcliffe Labs: 12,347,297 breached records (7TB)

Cyber-Attacks in October 2023

According to our sources, the Top 10 Cyber Attacks in October 2023 are mentioned below:

New Ransomware/ Malware Detected in October 2023

1. BlackSuit Ransomware

The most recent alleged incident, occurring in October 2023, targeted a United States-based HPH business. The computers and systems of this organization were compromised through the use of malware, preliminarily referred to as BlackSuit. A cybersecurity firm has recorded a minimum of three instances in which the BlackSuit encryptor was employed in assaults, resulting in ransom demands that were less than $1 million.

2. Conti Ransomware

Conti, a Russian-speaking Ransomware-as-a-Service (RaaS) gang, was initially documented in 2019. This group has been linked to over 400 intrusions spanning several sectors, with around 75% of these incidents occurring within the United States. Renowned for their assertive strategies and extensive assaults, they were recognized for their insistence on exorbitant ransoms reaching up to $25 million. Frequently engaging in the practice of double extortion, the perpetrators relied on their network of affiliates to specifically target firms that have an annual income above $100 million. Nevertheless, leaked conversations have revealed that certain members of the Conti group started to express doubts regarding the selection of the healthcare industry as a target, particularly around the peak of the COVID-19 outbreak. This phenomenon gave rise to conjecture over the potential occurrence of internal divisions within the group. Consequently, subsequent to a collaborative operation involving many governmental entities in February 2022, the aforementioned group dissolved, fragmented into smaller factions, and underwent a process of rebranding in order to elude legal authorities. Despite the cessation of activities by the aforementioned danger organization, Conti operators continue to engage in active and cooperative endeavors within newly formed factions, such as Royal.

3. Royal Ransomware

The Royal ransomware gang emerged as an observable phenomenon in the year 2022, exhibiting significant growth subsequent to the dissolution of the Conti group. During its initial campaigns, Royal utilized the encryptor developed by BlackCat. Subsequently, the focus of the investigation transitioned to a distinct entity known as Zeon, which exhibited a comparable modus operandi by disseminating ransom notes akin to those attributed to Conti. Subsequently, Royal underwent a rebranding process and commenced employing the name “Royal” in the ransom notes produced by its recently developed encryptor. The collective employs a combination of traditional and contemporary methodologies, indicating a comprehensive understanding of the malware landscape. The utilization of callback phishing as a deceptive technique to induce victims into installing remote desktop malware enables the perpetrators to enter the victims’ PCs with less exertion. In addition, the ransomware gang employs intermittent encryption strategies to expedite the process of encrypting the information of their victims.

In preceding instances of aggression, the collective has demanded monetary compensations ranging from $250,000 to in excess of $2 million.

Vulnerabilities/ Patches

Advisories issued, reports, analysis, etc. in October 2023

Enhance Your Knowledge With Craw Security

If you want to read more such articles and blogs that will enhance your knowledge regarding the latest cyber security attacks and other relevant stuff, you can go to the Official Website of Craw Security, the Best Cybersecurity Training Institute in Singapore.

About The Author:

Yogesh Naager is a content marketer who specializes in the cybersecurity and B2B space.  Besides writing for the Craw Security blogs, he’s also written for brands including CollegeDunia, Utsav Fashion, and NASSCOM.  Naager entered the field of content in an unusual way. He began his career as an insurance sales executive, where he developed an interest in simplifying difficult concepts.  He also combines this interest with a love of narrative, which makes him a good writer in the cybersecurity field.  In the bottom line, he frequently writes for News4Hackers.