Ransomware en México

A member posting as Cookiegen131 is recruiting a developer to build a Telegram based identity verification system for a stated Mexican telecom project.

An actor posting as cenfecracked claims to have obtained the database behind the Sistema de Atención Ciudadana, the platform through which members of the public submit petitions and requests for assistance to the Mexican Presidency.

Threat actors posting as homercracker and cenfecracked claim to have extracted the full contents of CADPE, the executive procurement and administrative platform of the Michoacán State Government in Mexico, which handles public tenders and supplier registration.

A threat actor using the alias derm0nix (Hackero$ Crew) claims to have breached the Portal de Salud de Culiacán, the official digital health system of the Culiacán municipal government in Mexico, and has leaked the data for free.

A threat actor using the alias Straightonumberone is selling what they describe as data stolen from Grupo ATC, a Mexican logistics conglomerate (comprising TLE, TLEA, and PHES), for $1,000 after a ransom negotiation reportedly failed.

A threat actor using the alias D3spair157 (operating as “Sociedad Privada 157”) has posted what they describe as a data leak from the Secretaría de Educación del Estado de Durango (SEED), Mexico's Durango state education department, reportedly obtained using administrator credentials to its student-management portal.

Threat actors using the aliases M1sery157 and D3spair157 (operating as “Sociedad privada 157”) have posted what they describe as a database scraped from a Coahuila state government portal in Mexico.

A forum actor posting as fuie has published data attributed to INPI, the French institute that administers industrial property and the national business register.

A forum actor posting as HollowCrimeCorp is selling what they describe as verified and active access to a high value BNP Paribas account, offered as a username and password pair rather than as data.

A forum actor posting as Alduin has published data attributed to amf.asso.fr, the site of the Association des Maires de France, which represents mayors and heads of intermunicipal bodies.

A forum actor posting as caustic claims to hold 675 GB taken from the network of Réso, a French supplier of construction products including ceilings, partitions, floors and facades, with agencies across the country.

A forum actor posting as GoreTerminal has published what they describe as the database of hopcharge.com, an on demand doorstep electric vehicle charging service operating in India through mobile vans.

A forum actor posting as SaltMobile1 is selling what they describe as a database of Salt, a Swiss mobile operator, containing more than 1,090,000 records.

A forum actor posting as Intelligence is selling what they describe as 3,134,269 full personal data records belonging to customers of DZI Insurance, Bulgaria's oldest insurer and a subsidiary of Belgium's KBC Group.

A forum actor posting as ksye is selling what they describe as the customer database of zerogaspi.fr, a French retailer selling surplus and short dated groceries.

Take-Two Interactive appears to be narrowing its investigation into the people responsible for leaking unreleased Grand Theft Auto VI gameplay, with new court filings showing the publisher is seeking increasingly targeted information from Discord.

A forum actor posting as weykofa has published 16.2 MB across 450 files attributed to science.co.il, the Israel Science and Technology Directory

A forum actor posting as mondial, crediting one collaborator, has published two datasets attributed to developpement-durable.gouv.fr, the domain of France's Ministry for Ecological Transition.

Three forum actors, led by one posting as yiranet, claim to have compromised the infrastructure of the Fédération Nationale Indépendante des Mutuelles, the French federation representing small and medium sized mutual insurers.

A forum actor posting as Keishell, crediting two others, has published what they describe as the myTnT shipment database belonging to pattons.com.au, an Australian business.