cRyPtHoN™ INFOSEC (EN)

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

Germany's Federal Criminal Police Office (aka BKA or the Bundeskriminalamt) has unmasked the real identity of the main threat actors associated with the now-defunct REvil (aka Sodinokibi) ransomware-as-a-service (RaaS) operation.

https://thehackernews.com/2026/04/bka-identifies-revil-leaders-behind-130.html

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

Italy's famed Uffizi admits cyber-attack but denies security breach

ITALY – The Uffizi Galleries in Florence has confirmed they were subject to a cyber-attack - but denied that the security systems protecting its famous works had been compromised. They stressed that nothing had been either damaged or stolen, after hackers were reported to have infiltrated the museum's IT systems and accessed sensitive security data. Italian newspaper Corriere della Sera reported that hackers had infiltrated the museums' IT systems, allegedly extracting access codes, internal maps and the locations of CCTV cameras and alarms, before issuing a ransom demand.

https://www.surinametimes.com/artikel/italys-famed-uffizi-admits-cyber-attack-but-denies-security-breach

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

Education Authority making ‘positive progress’ following cyber attack on Northern Ireland schools

Staff have been working ‘around the clock’ to provide students with a ‘safe and secure solution’

The Education Authority is making “positive progress” towards restoring access to the C2K system, following a cyber attack on Thursday.

https://www.irishnews.com/news/northern-ireland/education-authority-making-positive-progress-following-cyber-attack-on-northern-ireland-schools-6OKX2OF4HRBBXDGZNTW3PUM3RY/

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

City of Madison and FBI warn about criminals impersonating city officials

MADISON, Wis. (WMTV) -The FBI and City of Madison are warning the public about a phishing scam by criminals impersonating city and county officials to solicit fraudulent payments for local government planning and zoning applications and permits.

https://www.wmtv15news.com/2026/04/04/city-madison-fbi-warn-about-criminals-impersonating-city-officials/

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

Reddit Removes r/all From App and Desktop, but Old Reddit Still Shows It

Reddit has finished phasing out the r/all page, with links now redirecting to users' Home feeds instead. This change applies to both the Reddit app and the standard desktop website. Users accessing old Reddit through http://old.reddit.com/ or with the "Default to old Reddit" setting enabled can still reach r/all directly from the top menu bar.

https://www.ghacks.net/2026/04/05/reddit-removes-r-all-from-app-and-desktop-but-old-reddit-still-shows-it/

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

Qilin ransomware group claims the hack of German political party Die Linke

Qilin ransomware claims it stole data from Germany’s Die Linke and threatens to leak it; the party confirmed the incident, but not a breach.

The Qilin ransomware group claims it stole data from Die Linke, a German political party, and is threatening to release it.

https://securityaffairs.com/190348/cyber-crime/qilin-ransomware-group-claims-the-hack-of-german-political-party-die-linke.html

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

Payload Breach Hits Tscherne Consulting & United Finance Egypt

The Payload ransomware group claims to have breached multiple international organizations. The latest list of alleged victims posted by the group includes:

⚠️ Tscherne Consulting Steuerberatung GmbH (🇦🇹)

⚠️ United Finance Egypt (🇪🇬)

https://dailydarkweb.net/payload-breach-hits-tscherne-consulting-united-finance-egypt/

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

Device code phishing attacks surge 37x as new kits spread online

Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year.

In this type of attack, the threat actor sends a device authorization request to a service provider and receives a code, which is sent to the victim under various pretexts.

https://www.bleepingcomputer.com/news/security/device-code-phishing-attacks-surge-37x-as-new-kits-spread-online/

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv

When a billboard survives the wind, but not the boot

This GRUB is not an advert for some tasty fried food

Bork!Bork!Bork! It's one thing to bare your undercarriage in private. It's a whole other thing to do so on the side of a road, risking the possibility that passing drivers will question your Linux competence.

Sent in by an eagle-eyed Register reader, the borked billboard was spotted in Cheyenne, Wyoming. The billboard appears to have survived the recent storms intact. But the boot process? Not so much.

https://www.theregister.com/2026/04/03/when_a_billboard_survives_the/

📡 https://t.me/cRyPtHoN_INFOSEC_IT
📡 https://t.me/cRyPtHoN_INFOSEC_FR
📡
📡 https://t.me/cRyPtHoN_INFOSEC_DE
📡 https://t.me/BlackBox_Archiv