InfoSecBulletin Cybersecurity for mankind
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors, with 406 incidents publicly reported as ransomware attacks, accounting for seven percent of all ransomware incidents during that time.
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
Why Finance?
The financial sector consistently ranks as one of the most targeted industries for threat actors worldwide. Financial institutions handle large amounts of sensitive data, including financial transactions and customer information, making them attractive targets for cybercriminals. The critical nature of financial operations also raises the likelihood that these organizations will pay extortion and ransom demands.
The financial sector is appealing to malicious actors not just for financial gain, but also for its connections to other industries. They may target financial institutions to access information about other organizations, as one data breach can affect many partners and third parties.
The Threat Actors Targeting the Financial Sector:
Organizations must grasp the financial threat landscape by recognizing key players. Key threat actors targeting the financial sector from April 2024 to April 2025 include some of the most prominent and active groups.
Top Attack Vectors Facing the Financial Sector:
From April 2024 to April 2025, our analysts noted 6,406 posts about financial sector access in Flashpoint’s forum collections. How are these threat actor groups accessing financial data and systems? Flashpoint intelligence reveals they exploit third-party breaches, initial access brokers, insider threats, and other attack methods.
