HapleafAcademy

In July 2024, WazirX suffered one of the largest crypto breaches in history, losing nearly half of its digital assets, valued at approximately $230 million. Although no group claimed responsibility, similarities to past attacks suggest that the Lazarus Group, a North Korean state-sponsored hacking group, may be involved. The decentralized nature of cryptocurrency made it harder to track or identify the attackers. This breach highlights that even distributed technologies like blockchain, built on trustless networks, are vulnerable to cyber attacks.

The United Nations Development Programme (UNDP), the UN’s lead agency on international development, confirmed a data breach on March 27, 2024. This shows that hackers are no longer afraid of attacking massive international organizations as a part of their operations. A few days later, on April 3, 8Base posted UNDP as a victim in the list of its successful cyber attacks. Security experts have ranked 8Base among the top 5 ransomware groups currently in operation. The group employs various initial access methods, frequently delivering cyber attacks through phishing emails or leveraging initial access brokers (IABs) to infiltrate systems. However, one thing that has become evident after this attack is the need for stronger security measures.

The International Monetary Fund (IMF) confirmed on February 16, 2024, that a cybersecurity breach affected 11 of its email accounts. The IMF, an international organization with 190 member countries, aims to boost global growth and prosperity. Independent cybersecurity experts launched an investigation to assess the scope of the attack and determine necessary actions. The IMF stated that it re-secured the compromised email accounts and found no further breaches. The IMF confirmed that it uses the Microsoft 365 cloud-based email platform. It also stated that none of its high-level accounts were compromised during the breach. Additionally, the IMF emphasized the need for stronger security measures across the financial sector.

In March 2024, American Express discovered a third-party breach that exposed credit card information for over 50,000 users. The breach revealed card account numbers, expiration dates, and customer names. American Express confirmed that a service provider used by multiple merchants had experienced unauthorized access. The investigation confirmed that both current and previous card details were compromised. While the exact tactics of the attackers remain unknown, American Express stressed that its internal network was secure. The company also sent emails to affected users, advising them to monitor their accounts for fraudulent charges and to change their passwords. It recommended enabling Two-Factor Authentication for extra security.