1-15 September 2018 Cyber Attacks Timeline

It's time to publish the first timeline of September, covering the main cyber attacks occurred between September 1st and September 15th (plus some August events that were disclosed in September, so could not appear in the previous timeline). I collected 51 entries for September alone. Easily predictable, the numbers are growing compared to August: crooks are back in business after the Summer break.

Continue Reading1-15 September 2018 Cyber Attacks Timeline
Read more about the article 16-30 September 2018 Cyber Attacks Timeline
Credit to Pixabay

16-30 September 2018 Cyber Attacks Timeline

It’s time to publish the second timeline of September covering the main cyber attacks occurred between September 16th and September 30th (plus a few events that slipped away from the previous timeline. If you still have an account on Facebook...

Continue Reading16-30 September 2018 Cyber Attacks Timeline

January – September 2018 Cyber Attack Statistics

I have decided to write a dedicated blog post with all the attacks recorded so far in 2018 and the related statistics (with interactive charts). Some charts are also compared with the corresponding stats in 2017. The timeline containing all the events, which I will try to keep updated on monthly basis.

Continue ReadingJanuary – September 2018 Cyber Attack Statistics

October 2018 Cyber Attacks Statistics

It’s time to publish the statistics derived from the cyber attack timelines of October (Part I and Part II): this month I have collected a total of 113 events, a slight increase compared with September, when I collected 106 events.

Continue ReadingOctober 2018 Cyber Attacks Statistics

April 2012 Cyber Attacks Timeline (Part I)

As usual, here is the list of the main cyber attacks for April 2012. A first half of the month which has been characterized by hacktivism, although the time of the resounding attacks seems so far away. Also because, after the arrest of Sabu, the law enforcement agencies (which also were targeted during this month, most of all in UK), made  two further arrests of alleged hackers affiliated to the Anonymous Collective: W0rmer, member of CabinCr3w, and two possible members of the infamous collective @TeaMp0isoN.

In any case, the most important breach of the first half of the month has nothing to deal with hacktivism, targeted the health sector and occurred to Utah Department of Health with potentially 750,000 users affected. According to the Last Ponemon Study related to the cost of a breach ($194 per record) applied to the minimum number of users affected (250,000), the monetary impact could be at least $ 55 million.

Another interesting event to mention in the observed period is also the alleged attack against a Chinese Military Contractor, and the takedown of the five most important al-Qaeda forums. On the hacktivist front, it worths to mention a new hijacked call from MI6 to FBI, but also the alleged phone bombing to the same Law Enforcement Agency. Both events were performed by TeamPoison, whose two alleged members were arrested the day after.

For the sample of attacks I tried to identify: the category of the targets, the category of the attacks, and the motivations behind them. Of course this attempt must be taken with caution since in many cases the attacks did not target a single objective. Taking into account the single objectives would have been nearly impossible and prone to errors (I am doing the timeline in my free time!), so the data reported on the charts refer to the single event (and not to all the target affected in the single event).

As usual the references are placed after the jump.

By the way, SQL Injection continues to rule (the question mark indicates attacks possibly performed by SQL Injection, where the term “possibly” indicates the lack of direct evidences…).

If you want to have an idea of how fragile our data are inside the cyberspace, have a look at the timelines of the main Cyber Attacks in 2011 and 2012 (regularly updated), and follow @pausparrows on Twitter for the latest updates.

(more…)

Continue ReadingApril 2012 Cyber Attacks Timeline (Part I)