Unsurprisingly, multi-million losses continued to plague the fintech sector: Both Merlin and 0VIX suffered a cyber heist leading to the theft of $2M worth in cryptocurrency (and they are not the only ones hit in this timeline, despite the other attacks did not achieve the same impact).

In terms of  mega breaches there is one remarkable event, despite it is not completely clear, and it is the sale, on a Russian forum, of the details of 360 Chinese citizens. Other interesting event concern the arrest of an Ukrainian individual who stole the details of 360 European citizens, and the breaches of Terravision (2 million records compromised), the American Bar Association (1.5 million records compromised), and also NextGen Healthcare, victim of a ransomware attack compromising the details of 1.05 million users.

The Cyber Espionage front was always hot, with multiple campaigns unearthed also in the first half of April, and carried out by known threat actors such as the usual APT28, APT29, APT36, and also Sandworm tarketing Ukraine. Additionally it looks like Lazarus Group was also very active after the remarkable supply-chain attack to 3CX (and it looks like that even 3CX was compromised via a supply-chain attack).

And as always, this brief summary is closed by a quick mention to the attacks launched by the pro-Russian hacktivists of NoName057(16) and Killnet that were directed respectively against several websites in Italy, and individuals close to the NATO Last but not least, the collective Anonymous Sudan continued its campaign against Israel.

My suggestion is always the same: browse the timeline, and obviously thanks for sharing it and supporting my work in spreading the risk awareness across the community. As always, don’t forget to follow @paulsparrows on Twitter, or even connect on Linkedin, for the latest updates.