Cyberattack Alert
━━━━━━━━━━━━━━━━━━━━━━━━━
Victim: Stryker
Domain:
Country: 🇮🇪 IE
Date: Mar 10th, 2026
Summary:
A group of hackers supported by Iran, identified as Handala, is suspected of causing a sophisticated cyberattack paralyzing the global operations of the American medical technology company Stryker. This attack, which occurred last night, resulted in the closure of all the company's computer systems, affecting its sites in Europe, Asia and the United States, and forcing the removal of data on its 4,000 employees in Cork. Although the root cause has not yet been confirmed, the incident has resulted in a total cessation of the company's activities, which employs more than 56,000 people in 61 countries.
Source: https://www.irishmirror.ie/news/irish-news/stryker-cyber-attack-thousands-irish-36850017.amp
━━━━━━━━━━━━━━━━━━━━━━━━━
Victim: Stryker
Domain:
stryker.comCountry: 🇮🇪 IE
Date: Mar 10th, 2026
Summary:
A group of hackers supported by Iran, identified as Handala, is suspected of causing a sophisticated cyberattack paralyzing the global operations of the American medical technology company Stryker. This attack, which occurred last night, resulted in the closure of all the company's computer systems, affecting its sites in Europe, Asia and the United States, and forcing the removal of data on its 4,000 employees in Cork. Although the root cause has not yet been confirmed, the incident has resulted in a total cessation of the company's activities, which employs more than 56,000 people in 61 countries.
Source: https://www.irishmirror.ie/news/irish-news/stryker-cyber-attack-thousands-irish-36850017.amp
‼️ DOJ Press Release
━━━━━━━━━━━━━━━━━━━━━
DOJ, VA Sign Agreement to Improve Care for Nation’s Most Vulnerable Veterans
Full Press Release → justice.gov
━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • DOJ Monitor
━━━━━━━━━━━━━━━━━━━━━
DOJ, VA Sign Agreement to Improve Care for Nation’s Most Vulnerable Veterans
Full Press Release → justice.gov
━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • DOJ Monitor
www.justice.gov
DOJ, VA Sign Agreement to Improve Care for Nation’s Most Vulnerable
The Department of Veterans Affairs (VA) and Department of Justice (DOJ) have signed a memorandum of understanding (MOU) that will help some of America’s most vulnerable Veterans get the ongoing care they need.
🚨 New Dark Web Informer Blog Post!
Title: Threat Actor Selling Root Access to South Korean Government Server With Lateral Movement to 42 Internal Hosts
Link: https://darkwebinformer.com/threat-actor-selling-root-access-to-south-korean-government-server-with-lateral-movement-to-42-internal-hosts/
Title: Threat Actor Selling Root Access to South Korean Government Server With Lateral Movement to 42 Internal Hosts
Link: https://darkwebinformer.com/threat-actor-selling-root-access-to-south-korean-government-server-with-lateral-movement-to-42-internal-hosts/
Dark Web Informer
Threat Actor Selling Root Access to South Korean Government Server With Lateral Movement to 42 Internal Hosts
‼️🌍 A threat actor is allegedly selling a bundle of 19 corporate accesses targeting companies across Spain, UK, Brazil, Guatemala, Mexico, and India.
The access reportedly includes GitLab/GitHub repos and tokens, SSO/IdP configurations (Okta, Azure AD, OpenAM), CI/CD secrets, Jira/Confluence admin, AWS Lambda with payment code, vulnerability data, Slack webhooks, and customer databases.
Targets range from large enterprises (€2B–€38B revenue in retail, insurance, banking) to mid-sized firms (€15M–€450M in IT, SaaS, fintech) and smaller cybersecurity companies. Available as a package or individually.
The access reportedly includes GitLab/GitHub repos and tokens, SSO/IdP configurations (Okta, Azure AD, OpenAM), CI/CD secrets, Jira/Confluence admin, AWS Lambda with payment code, vulnerability data, Slack webhooks, and customer databases.
Targets range from large enterprises (€2B–€38B revenue in retail, insurance, banking) to mid-sized firms (€15M–€450M in IT, SaaS, fintech) and smaller cybersecurity companies. Available as a package or individually.
‼️ DOJ Press Release
━━━━━━━━━━━━━━━━━━━━━
Aetna Agrees to Pay $117.7 Million to Resolve False Claims Act Allegations
Full Press Release → justice.gov
━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • DOJ Monitor
━━━━━━━━━━━━━━━━━━━━━
Aetna Agrees to Pay $117.7 Million to Resolve False Claims Act Allegations
Full Press Release → justice.gov
━━━━━━━━━━━━━━━━━━━━━
🕵️ Dark Web Informer • DOJ Monitor
www.justice.gov
Aetna Agrees to Pay $117.7 Million to Resolve False Claims Act
Aetna Inc., a national insurer incorporated under the laws of Pennsylvania, has agreed to pay $117,700,000 to resolve allegations that it violated the False Claims Act by submitting or failing to withdraw inaccurate and untruthful diagnosis codes for its…
🚨 New Dark Web Informer Blog Post!
Title: Viking Line Ferries Allegedly Breached With Full Passenger Database and Payment Data Leaked
Link: https://darkwebinformer.com/viking-line-ferries-allegedly-breached-with-full-passenger-database-and-payment-data-leaked/
Title: Viking Line Ferries Allegedly Breached With Full Passenger Database and Payment Data Leaked
Link: https://darkwebinformer.com/viking-line-ferries-allegedly-breached-with-full-passenger-database-and-payment-data-leaked/
Dark Web Informer
Viking Line Ferries Allegedly Breached With Full Passenger Database and Payment Data Leaked
⚠️ FBI Watchdog - DNS Change (SOA) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: thesecure.biz
Record Type: DNS Change (SOA)
Time Detected: 2026-03-11 16:25:00 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: thesecure.biz
Record Type: DNS Change (SOA)
Time Detected: 2026-03-11 16:25:00 UTC
Previous Records:
edna.ns.cloudflare.com. dns.cloudflare.com. 2397922649 10000 2400 604800 1800
New Records:
edna.ns.cloudflare.com. dns.cloudflare.com. 2398729597 10000 2400 604800 1800
⚠️ FBI Watchdog - DNS Change (SOA) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: ps4pkg.com
Record Type: DNS Change (SOA)
Time Detected: 2026-03-11 17:13:40 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: ps4pkg.com
Record Type: DNS Change (SOA)
Time Detected: 2026-03-11 17:13:40 UTC
Previous Records:
ns1.fbi.seized.gov. dns.cloudflare.com. 2398103745 10000 2400 604800 1800
New Records:
ns1.fbi.seized.gov. dns.cloudflare.com. 2398734186 10000 2400 604800 1800
‼️🇺🇸 Stryker is currently offline due to a wiper malware attack by Handala.
https://x.com/BleepinComputer/status/2031782605616492593
Edit: Flag was set to Israel, should have been USA
https://x.com/BleepinComputer/status/2031782605616492593
Edit: Flag was set to Israel, should have been USA
🔥2
Do you want me to delete the DOJ articles that are not cyber related when I see them? Currently all of the articles come in unfiltered rather than by keyword so nothing is missed.
Anonymous Poll
70%
Yes
18%
No
11%
Show Results
⚠️ FBI Watchdog - DNS Change (SOA) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: ps5pkg.net
Record Type: DNS Change (SOA)
Time Detected: 2026-03-11 19:17:07 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: ps5pkg.net
Record Type: DNS Change (SOA)
Time Detected: 2026-03-11 19:17:07 UTC
Previous Records:
ns1.fbi.seized.gov. dns.cloudflare.com. 2398068487 10000 2400 604800 1800
New Records:
ns1.fbi.seized.gov. dns.cloudflare.com. 2398741935 10000 2400 604800 1800
Cybersecurity Incident Disclosure
Wed, 11 Mar 2026 17:24:57 EDT
A cybersecurity incident has been disclosed by STRYKER CORP, Inc CIK: 0000310764, Ticker: $SYK.
View SEC Filing
Wed, 11 Mar 2026 17:24:57 EDT
A cybersecurity incident has been disclosed by STRYKER CORP, Inc CIK: 0000310764, Ticker: $SYK.
View SEC Filing
‼️🇦🇷 Arimex Importadora has been claimed a victim to Qilin Ransomware
Note: Qilin used the wrong logo screenshot, the samples provided show Arimex Importadora
Note: Qilin used the wrong logo screenshot, the samples provided show Arimex Importadora
⚠️ FBI Watchdog - DNS New Domain (A) ⚠️
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: drifthub.cc
Record Type: DNS New Domain (A)
Time Detected: 2026-03-11 22:11:12 UTC
Previous Records:
New Records:
🔗 DarkWebInformer.com - Cyber Threat Intelligence
Domain: drifthub.cc
Record Type: DNS New Domain (A)
Time Detected: 2026-03-11 22:11:12 UTC
Previous Records:
None
New Records:
104.21.89.31
172.67.136.145