Coface
Ransomware group called qilin claims attack for Coface. The target comes from Italy. We identify this attack with following hash code: 4ee11f54ef7f6c76c0e21ede47431a00d4b59950e1a5763ba06480d800faa23e (ID: 35032)Target victim website: www.coface.it

by RansomFeed - https://r.zerozone.it/post/b6AzKezsm2xhAsEpB

sipresitalia.it
Ransomware group called krybit claims attack for sipresitalia.it. The target comes from Italy. We identify this attack with following hash code: 74e8871933058a2fb4018e2fe3b6c0e70c63c62374589c5f3332cf842491a45f (ID: 35107)Target victim website: sipresitalia.it

by RansomFeed - https://r.zerozone.it/post/YEep8EHHVZKfgATB3

China Removes Microsoft Windows at State Users Ahead of Plan - Bloomberg
https://www.bloomberg.com/news/articles/2026-08-18/china-axing-microsoft-windows-from-state-agencies-ahead-of-plan

Sanità sotto attacco: il ritorno a bit e carta, quasi una battaglia di altri tempi. Il caso Bulgaria - Cyber Security 360 https://share.google/WH6GCDxyvUAAztx21

TECNOLOGICA S.r.l.
Ransomware group called titan claims attack for TECNOLOGICA S.r.l.. The target comes from Italy. We identify this attack with following hash code: dca15eeda3c68298e0370cf9c36174a016279e5cbd3d80d06b701b1b3a6ca26b (ID: 35157)Target victim website: tecnologicasrl.com

by RansomFeed - https://r.zerozone.it/post/ZbwvgXW2fqb4TvNd0

ELCON MEGARAD S.p.A
Ransomware group called titan claims attack for ELCON MEGARAD S.p.A. The target comes from Italy. We identify this attack with following hash code: ecd8009a463243d2017d468fd31ff250610d158d3f333393bfea190508f03601 (ID: 35151)Target victim website: elconmegarad.com

by RansomFeed - https://r.zerozone.it/post/N9wyrSN5PZ5F2JxZB

POEMA S.r.l.
Ransomware group called titan claims attack for POEMA S.r.l.. The target comes from Italy. We identify this attack with following hash code: a9325072cafd9d40ad3ce8a740164e1718e3afd58a1480a4c5ae5d501c59e8a3 (ID: 35173)Target victim website: www.poemasrl.it

by RansomFeed - https://r.zerozone.it/post/5MuGC7b95Tg6qDA5k

Tedesco & Partners STP srl
Ransomware group called titan claims attack for Tedesco & Partners STP srl. The target comes from Italy. We identify this attack with following hash code: 4cf6d04435b9f4e55ca8e17850d23996837176da0ec8bb3abf3f5a03d0656571 (ID: 35174)Target victim website: tedescoepartners.it

by RansomFeed - https://r.zerozone.it/post/xGrkCbwyPGv7Dz3Rz

Elbor S.p.A.
Ransomware group called titan claims attack for Elbor S.p.A.. The target comes from Italy. We identify this attack with following hash code: fdf1be92f9eca715e27b36b953e8e989bb69413792069429e491230dd6168091 (ID: 35163)Target victim website: www.elbor.it

by RansomFeed - https://r.zerozone.it/post/9vSC9S1gzQfvQhyAw

GitHub - Italian-Builders-Org/DoveVannoINostriSoldi: Raccogliamo e analizziamo i dati sulla spesa pubblica italiana per individuare, grazie all’AI, dove è possibile migliorare l’efficienza e l’utilizzo delle risorse pubbliche. · GitHub
https://github.com/Italian-Builders-Org/DoveVannoINostriSoldi

CONDOR SPA
Ransomware group called titan claims attack for CONDOR SPA. The target comes from Italy. We identify this attack with following hash code: c262d8258ec05868dae6c8a30076b219853c8e74398253452a307c13be85a25d (ID: 35164)Target victim website: www.condor-group.it

by RansomFeed - https://r.zerozone.it/post/ZbGSf6BwusGWErHz6

CTP S.r.l.
Ransomware group called titan claims attack for CTP S.r.l.. The target comes from Italy. We identify this attack with following hash code: 5b896800454bee13234e64a741ae1af96f5d7afc484ff43b69d3ecb18491c0c5 (ID: 35176)Target victim website: ctpsrl.it

by RansomFeed - https://r.zerozone.it/post/T7Jbd78WsTvWQpqef

Alto Calore Servizi SPA
Ransomware group called titan claims attack for Alto Calore Servizi SPA. The target comes from Italy. We identify this attack with following hash code: a716e202cdac94de147e480b870ca6ca258ebbe7453c153cc56955d8363a1580 (ID: 35175)Target victim website: www.altocalore.it

by RansomFeed - https://r.zerozone.it/post/HU1bdDJujrgry4k82

Phishing ai danni del Ministero della Salute sfrutta un falso “rimborso ticket sanitario”
Il CERT-AGID ha avuto evidenza di una campagna di phishing veicolata tramite email che utilizza il nome e le grafiche del Ministero della Salute allo scopo di acquisire informazioni personali e dati delle carte di pagamento delle vittime.

by CERT-AgID - https://r.zerozone.it/post/TMXdMfcSUpXrqMaAU

Termotecnica Industriale S.r.l.
Ransomware group called titan claims attack for Termotecnica Industriale S.r.l.. The target comes from Italy. We identify this attack with following hash code: 017ae0e337ba6f67ac64802b745198bd71bdb4a1ba0fbd9cd2a88a22ad2b2a5a (ID: 35178)Target victim website: termotecnica.it

by RansomFeed - https://r.zerozone.it/post/CZfFRevp0Fnrbj2pS

Sintesi riepilogativa delle campagne malevole nella settimana del 15 – 21 agosto
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 132 campagne malevole, di cui 103 con obiettivi italiani e 29 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei suoi enti accreditati i relativi 1431 indicatori di compromissione (IoC) individuati.

by CERT-AgID - https://r.zerozone.it/post/t7XVF2gMmX7CAxAxS

Comunicazione ufficiale su attacco informatico alla piattaforma Bergantini
https://www.spaggiari.eu/news/comunicazione-ufficiale-sull-attacco-informatico-alla-piattaforma-bergantini

Alla comunicazione del gruppo Spaggiari ha risposto la #ransomware gang Xploitrs.