Data Security

China, India, South Korea, Indonesia, Vietnam, Bangladesh, and Pakistan have been subjected to attacks by suspected Vietnamese threat operation CoralRaider, which involved the delivery of the QuasarRAT variant dubbed RotBot and the XClient information-stealing malware, since May, reports The Hacker News.

Organizations in the oil and gas industry have been targeted with a phishing campaign that involved the deployment of a new Rhadamanthys information-stealing malware variant, The Hacker News reports.

Twenty-one of S&P companies have been subjected to data breaches in 2023, indicating the firms' attractiveness as cyberattack targets due to the lucrative business they bring to threat actors, reports SiliconAngle.

AT&T has been hit with a deluge of class-action lawsuits after confirming following a series of denials the legitimacy of data belonging to 73 million customers, including 7.6 million current account holders, which was initially published by ShinyHunters in 2021 before being exposed again by MajorNelson last month, BleepingComputer reports.

U.S. cancer-focused clinical research organization and cancer hospital operator City of Hope had data from 827,149 patients potentially compromised following a cyberattack against some of its systems between September and October, according to The Register.

StateScoop reports that New York City has limited access to its payroll system for more than a week now following the discovery of an SMS phishing, or smishing, campaign, which sought to facilitate personal data theft.

BleepingComputer reports that IxMetro PowerHost, a Chile-based data center and hosting provider, had its VMware ESXi servers and backups compromised by a novel SEXi ransomware attack during the weekend, which has resulted in website and service disruptions.