Black Shadow hackers strike again, leak documents in new cyberattack

guest · Oct 31, 2021

Black Shadow hackers strike again, leak documents in new cyberattack
October 31, 2021
https://www.jpost.com/jpost-tech/is...ed-private-information-held-for-ransom-661865

Black Shadow, the hackers who leaked thousands of documents containing the personal information of customers with Israel’s Shirbit insurance company in December, have now hacked the servers of K.L.S. Capital Ltd. as well, the group said in a Telegram post on Saturday.

On Saturday morning, the hacker group announced, “We are here to inform you a (sic) cyber attack against K.L.S CAPITAL LTD which is in Israel.

“Their servers are destroyed, and their client data is in our hands,” they added, saying that they waited 72 hours for the company to give them the 10 bitcoins they demanded as ransom for the information, but the company failed to pay them.
“We want to leak some part of their data gradually,” they said. “Part of our negotiation will be published later.”
Click to expand...

The Privacy Protection Authority announced on Sunday that it was examining the details of the incident and its consequences in cooperation with all relevant parties.

“We’re sadly not so ok. We took a heavy blow from Iranian hackers who apparently are seeking to attack the State of Israel and they care less about the money,” said K.L.S CEO , Omer Maman, to The Jerusalem Post.
Click to expand...

The cybersecurity consultant additionally questioned what protective systems were protecting K.L.S.'s systems against breaches and if and how hackers were able to get as deep as they did into databases that are supposed to be classified and protected according to guidelines set by Israel's Privacy Protection Authority.
Click to expand...

guest · Oct 31, 2021

Iranian Black Shadow hacking group breached Israeli Internet hosting firm
October 31, 2021
https://securityaffairs.co/wordpress/124000/hacking/black-shadow-hacked-cyberserve.html

Iranian hacking group Black Shadow compromised the server of the Israeli internet hosting company Cyberserve, taking down several of the sites hosted by the firm. The group also claims to have stolen data and threatens to leak it.

“Hello Again! We have news for you,” the hackers wrote in a message circulated on social media on Friday. “You probably could not connect to many websites today. ‘Cyberserve’ company and their customers [were] hit by us. You may ask what about Data? As always, we have lots of it. If you don’t want your Data leaked by us, contact us soon.”
Some of the websites hosted on Cyberserve’s servers were unavailable on Saturday morning. The company hosts the sites of the Dan and Kavim public transportation companies, the Children’s Museum in Holon, the Pegasus travel company and the blogsite of the Kan public broadcaster.
Click to expand...

Later the group decided to publish some of the stolen data because the company did not contact them.

“They did not contact us… so (the) first data is here,” reads the message published by Black Shadow before publishing some of the stolen info.
Click to expand...

guest · Oct 31, 2021

'Black Shadow' hackers leak data from Israeli LGBT app
October 31, 2021
https://www.jpost.com/israel-news/iranian-hackers-breach-israeli-company-cyberserve-683529

The hacker group "Black Shadow" has leaked data from various Israeli companies, such as LGBTQ dating app "Atraf", Dan bus company and tour booking company Pegasus on Saturday night.

Earlier in the day, they leaked data from the Kavim bus app after previous threats. “They did not contact us ...So first data is here,” the group said on Telegram, affixing a photo of what appeared to be a database of Israeli citizens' personal information. “If you do not contact us, (sic) it will be more,” added the group.
Kavim released a statement on Saturday afternoon, explaining that they were aware of the security incident.

“As soon as the incident became known to us, the company contacted the Transport Ministry, the Cyber Security Headquarters, and also hired external professionals in the field...to complete a comprehensive, professional and independent investigation into the incident.”
Click to expand...

On Friday, the group announced that they had hacked into the servers of the Israeli Internet company Cyberserve, promptly turning them off and threatening to leak data.
Click to expand...

guest · Nov 5, 2021

Black Shadow hackers leak medical records of 290,000 Israeli patients
November 2, 2021
https://www.timesofisrael.com/black-shadow-hackers-leak-medical-records-of-290000-israeli-patients/

In its second major leak in a day, the Black Shadow hacking group on Tuesday night uploaded what it said was the full database of personal information from Israel’s Machon Mor medical institute, including medical records of some 290,000 patients.

The directory reportedly includes information on patients’ blood tests, treatments, appointments for gynecologists, CT scans, ultrasounds, colonoscopies, vaccinations for flights abroad, and more.
The documents reportedly include correspondence from patients with requests including medical appointments, the need for procedures and test results.
Click to expand...

Earlier Tuesday, Black Shadow released what it said was the full database of personal user information from the Atraf website, an LGBTQ dating service and nightlife index.
The group uploaded the file to a channel on the Telegram messaging app after a ransom demand of $1 million in digital currency to prevent the leak was apparently not paid.
Click to expand...

guest · Nov 12, 2021

Israeli Cyber Unit action removes Black Shadow Iran-affiliated hacking website
November 11, 2021
https://www.jns.org/israeli-cyber-unit-action-removes-black-shadow-iran-affiliated-hacking-website/

The Israeli Cyber Unit, part of the State Prosecution Office, led the removal of a website belonging to the Black Shadow Iranian-affiliated hacking website after it targeted a number of Israeli websites, Walla reported on Thursday.

“The removal of the site means a significant reduction to expose personal materials publicized by Black Shadow, a hacking group affiliated with Iran that has operated against Israeli sites in the past two years,” said the report.
One of the recent targets of Black Shadow was the LGBTQ dating site Atraf, which has been subject to a ransom demand, with attackers leaking names of users from the application. In the past, the group also attacked Israeli insurance company Shirbit.
Click to expand...

The site that was removed from the Internet offered leaked databases stolen from Atraf, according to the report, as well as other databases that were taken from the CyberServe company, which built Atraf’s website.
Click to expand...

Log in or Sign up

Black Shadow hackers strike again, leak documents in new cyberattack

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Black Shadow hackers strike again, leak documents in new cyberattack

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches