Security News

A threat group of suspected Romanian origin called RUBYCARP has been observed maintaining a long-running botnet for carrying out crypto mining, distributed denial-of-service (DDoS), and phishing...

The Romanian national cybersecurity agency has pinned the outbreak of ransomware cases across the country's hospitals to an incident at a service provider. All hospitals caught up in the ransomware scourge are thought to have been breached via the HIS. Per legal reporting obligations in Romania, service providers must inform the DNSC and national CSIRT of incidents that significantly impact the continuity of essential services.

100 hospitals across Romania have taken their systems offline after a ransomware attack hit their healthcare management system. The Hipocrate Information System used by hospitals to manage medical activity and patient data was targeted over the weekend and is now offline after its database was encrypted.

Over two dozen hospitals in Romania have taken their systems offline after a ransomware attack took down their healthcare management system. The Hipocrate Information System used by hospitals to manage medical activity and patient data was targeted over the weekend and is now offline after its database was encrypted.

At least 21 hospitals in Romania were knocked offline after a ransomware attack took down their healthcare management system. The Hipocrate Information System used by hospitals to manage medical activity and patient data was targeted over the weekend and is now offline after its database was encrypted.

At least 18 hospitals in Romania were knocked offline after a ransomware attack took down their healthcare management system. The Hipocrate Information System used by hospitals to manage medical activity and patient data was targeted over the weekend and is now offline after its database was encrypted.

The Romanian national cyber security and incident response team, DNSC, has issued a statement about a series of distributed denial-of-service attacks targeting several public websites managed by the state entities. DNSC is now collaborating with other authorities in the country to map these attacks and mitigate their effect.

The leader of Mexico's Green Party has been removed from office following allegations that he received money from a Romanian ATM skimmer gang that stole hundreds of millions of dollars from tourists visiting Mexico's top tourist destinations over the past five years. Jose de la Peña Ruiz de Chávez, who leads the Green Ecologist Party of Mexico, was dismissed this month after it was revealed that his were among 79 bank accounts seized as part of an ongoing law enforcement investigation into a Romanian organized crime group that owned and operated an ATM network throughout the country.

Two Romanians suspected of running services for encrypting malware and testing it against antivirus engines were arrested last week. The services, Europol says, were used for crypting a variety of malware types, including information stealers, Remote Access Trojans, and ransomware families.

An exhaustive inquiry published today by a consortium of investigative journalists says a three-part series KrebsOnSecurity published in 2015 on a Romanian ATM skimming gang operating in Mexico's top tourist destinations disrupted their highly profitable business, which raked in an estimated $1.2 billion and enjoyed the protection of top Mexican authorities. The multimedia investigation by the Organized Crime and Corruption Reporting Project and several international journalism partners detailed the activities of the so-called Riviera Maya crime gang, allegedly a mafia-like group of Romanians who until very recently ran their own ATM company in Mexico called "Intacash" and installed sophisticated electronic card skimming devices inside at least 100 cash machines throughout Mexico.