Lmst

#Ecuador:The Qilin ransomware group claims to have stolen 100GB of data from the Savings and Credit Cooperative of Public Servants of the Ministry of Education and Culture.

There is no information available regarding whether the members of the Savings and Credit Cooperative of Public Servants of the Ministry of Education and Culture of Ecuador (CACSPMEC) have been notified about the theft of personal data that allegedly occurred in this incident.

More details:

https://www.security-chu.com/2025/05/ransomware-qilin-cooperativa-ecuador.html

#ciberseguridad #government #cyberattack #ransomware #Qilin #LATAM #ciberseguridad #dataprotection #PII #cybersecurity #news #noticias

Chum1ng0 - Security Research :verified: boosted:

A stolen Facebook profile is conducting a fraudulent campaign using the image of Leonardo Farkas.

The stolen verified profile belongs to Brazilian Olympic judoka medalist Rafael Silva Baby.

Attempts to contact the medalist via Instagram were unsuccessful.

The campaign displays Russian characters in its source code, uses the design of biobiochile.cl, and requests registration details (name, surname, email, phone number).

URL: http://frogswitchtable.com

more details:

https://www.security-chu.com/2025/05/Perfil-robado-en-Facebook-hace-campana-fraudulenta-Chile.html

#scam #Chile #fake #fraud #cybersecurity #ciberseguridad #noticias #news #LATAM

A stolen Facebook profile is conducting a fraudulent campaign using the image of Leonardo Farkas.

The stolen verified profile belongs to Brazilian Olympic judoka medalist Rafael Silva Baby.

Attempts to contact the medalist via Instagram were unsuccessful.

The campaign displays Russian characters in its source code, uses the design of biobiochile.cl, and requests registration details (name, surname, email, phone number).

URL: http://frogswitchtable.com

more details:

https://www.security-chu.com/2025/05/Perfil-robado-en-Facebook-hace-campana-fraudulenta-Chile.html

#scam #Chile #fake #fraud #cybersecurity #ciberseguridad #noticias #news #LATAM

Chum1ng0 - Security Research :verified: boosted:

On April 24, the mining company Kolpa was listed on the website of the SafePay ransomware group.

🇵🇪 The cybercriminal group claimed in its description that it had stolen 108 GB of data from the company.

The SafePay group leaked information on a page where it compiles all the documentation belonging to this company.

Some documents titled "Constancia de Alta del Personal en Formación" contain employee identification data, such as ID number (DNI), date of birth, nationality, full name, gender, marital status, phone number, email, and address.

Another document called "Data Entrega de Tarjetas Hijos."

This file exposes personal data of workers, such as ID number (DNI), names, job title, and department, as well as information about their family members, including full names of children, ID numbers, dates of birth, age, and gender.

#PII #dataleak #databreach #dataprotection #privacy #ransomware #cyberattack #Peru #cybersecurity #ciberseguridad

If you ever worked for this company, your data may be leaked on the dark web.

In Peru, the Personal Data Protection Law (Law No. 29733) requires companies to protect personal data and notify affected individuals in case of data breaches.

More details:

https://www.security-chu.com/2025/05/Minera-kolpa-ciberataque-safepay-ransomware.html

On April 24, the mining company Kolpa was listed on the website of the SafePay ransomware group.

🇵🇪 The cybercriminal group claimed in its description that it had stolen 108 GB of data from the company.

The SafePay group leaked information on a page where it compiles all the documentation belonging to this company.

Some documents titled "Constancia de Alta del Personal en Formación" contain employee identification data, such as ID number (DNI), date of birth, nationality, full name, gender, marital status, phone number, email, and address.

Another document called "Data Entrega de Tarjetas Hijos."

This file exposes personal data of workers, such as ID number (DNI), names, job title, and department, as well as information about their family members, including full names of children, ID numbers, dates of birth, age, and gender.

#PII #dataleak #databreach #dataprotection #privacy #ransomware #cyberattack #Peru #cybersecurity #ciberseguridad

If you ever worked for this company, your data may be leaked on the dark web.

In Peru, the Personal Data Protection Law (Law No. 29733) requires companies to protect personal data and notify affected individuals in case of data breaches.

More details:

https://www.security-chu.com/2025/05/Minera-kolpa-ciberataque-safepay-ransomware.html

Chum1ng0 - Security Research :verified: boosted:

Here's the unlocker.exe file that the Akira ransomware contained in some of its chats with the entities I was able to analyze.

Feel free to analyze it. Best regards, your friend chum1ng0.

https://github.com/chum1ng0/akira-unlocker

#ransomware #akira #cybersecurity #Malware #ciberseguridad #noticias #news #cyberattack

Here's the unlocker.exe file that the Akira ransomware contained in some of its chats with the entities I was able to analyze.

Feel free to analyze it. Best regards, your friend chum1ng0.

https://github.com/chum1ng0/akira-unlocker

#ransomware #akira #cybersecurity #Malware #ciberseguridad #noticias #news #cyberattack

Chum1ng0 - Security Research :verified: boosted:

We identified four chats from different companies that attempted to negotiate with Akira after being attacked.

Some of these companies were still listed as victims on the group's website.

We analyzed 4 cases: 3 entities refused to negotiate, 1 entity paid $25,000 to a Bitcoin address, and the company was removed from Akira's ransomware site.

Akira's support sent a decryptor called unlocker.exe with instructions to proceed with system decryption and also provided their security report:

"Initial access to your network was purchased on the dark web. Subsequently, kerberoasting was performed, and we obtained the password hashes. Then, we extracted them and retrieved the domain administrator password."

More details:

https://www.security-chu.com/2025/05/entidades-negociando-con-el-grupo-akira-ransomware.html

#akira #ransomware #cybersecurity #ciberseguridad #noticias #news #cyberattack

Chum1ng0 - Security Research :verified: boosted:

In an effort to clarify certain aspects of the attack and the group’s strategy, SuspectFile.com submitted a series of questions to Silent, receiving direct answers that both confirm and expand upon the information published in their statement. The questions and responses will be fully reported at the end of this article.

https://www.suspectfile.com/ransomware-group-silent-claims-to-have-found-a-buyer-for-the-data-stolen-from-versa-networks/

#Infosec #Data_Breach #Ransomware #VersaNetworks #Silent

We identified four chats from different companies that attempted to negotiate with Akira after being attacked.

Some of these companies were still listed as victims on the group's website.

We analyzed 4 cases: 3 entities refused to negotiate, 1 entity paid $25,000 to a Bitcoin address, and the company was removed from Akira's ransomware site.

Akira's support sent a decryptor called unlocker.exe with instructions to proceed with system decryption and also provided their security report:

"Initial access to your network was purchased on the dark web. Subsequently, kerberoasting was performed, and we obtained the password hashes. Then, we extracted them and retrieved the domain administrator password."

More details:

https://www.security-chu.com/2025/05/entidades-negociando-con-el-grupo-akira-ransomware.html

#akira #ransomware #cybersecurity #ciberseguridad #noticias #news #cyberattack

Chum1ng0 - Security Research :verified: boosted:

🇬🇹 Server exposed data from Miscorp S.A.

Miscorp was alerted about this situation, and the server is no longer exposed as of a few days ago.

The server exposed files such as: identity cards, electronic records of individual employment contracts, temporary certificates of no claims, diplomas, resumes, criminal background reports, and health cards.

Data of employees or former employees, including names, DPI, phone numbers, addresses, dates of birth, nationality, marital status, home ownership information, etc.

Client Info