Security Blueprints
Advisory

Tag / 9 entries / feed available

Malware

9 of the 76 analyses in Data Breaches carry this tag. All 9 are scored against the four invariants; the matrix below is that evidence.

How this tag scores against the four invariants

BreachHSFPECEGRSCA
Home Depot Data Breach April 2014
Target Data Breach 2013
Anthem Data Breach Incident Analysis
SolarWinds Supply Chain Attack
Fujitsu Malware Attack 2024
Google Aurora Incident
Heartland Payment Systems Data Breach
JADEPUFFER Agentic Ransomware Campaign via Langflow CVE-2025-3248 (2026)
Copay Cryptocurrency Wallet Data Breach

HSF · PEC · EGR · SCA — filled where the invariant would have prevented or contained the breach

076

JADEPUFFER Agentic Ransomware Campaign via Langflow CVE-2025-3248 (2026)

Contained by: PEC, EGR

JADEPUFFER exploited an internet-exposed Langflow deployment vulnerable to CVE-2025-3248, then accessed MinIO, PostgreSQL, MySQL, and Alibaba Nacos environments. The operation encrypted exactly 1,342 Nacos configuration items, deleted original tables, and attempted additional database destruction; a later ENCFORGE payload targeted AI and machine-learning files. No victim organization or affected-person count was publicly reported, and the degree of human involvement in the agentic campaign remains unresolved.

066

Fujitsu Malware Attack 2024

Prevented by: PEC, EGR

In March 2024, Fujitsu experienced a significant cybersecurity breach involving malware on its corporate network. The incident potentially exposed customer information, though there is no evidence of data misuse. The malware used sophisticated evasion techniques, indicating a high level of attacker skill, but the threat actors remain unidentified. The breach primarily affected Fujitsu’s operations in Japan, impacting 49 computers.

031

SolarWinds Supply Chain Attack

Prevented by: PEC, EGR

The SolarWinds Supply Chain Attack involved the compromise of SolarWinds Orion software, leading to malicious updates that were installed by over 18,000 customers. This allowed the attackers, attributed to state-sponsored groups, to steal data and spy on organizations including U.S. government departments. The attack exploited software development vulnerabilities to insert SUNBURST malware, affecting multiple sectors globally.

025

Copay Cryptocurrency Wallet Data Breach

Prevented by: SCA

In November 2018, the Copay cryptocurrency wallet, developed by BitPay, suffered a data breach due to a malicious version of the event-stream Node.js library. The breach involved unauthorized access to users’ private keys and cryptocurrency assets through dependency injection of malicious code by threat actors, significantly affecting wallets with considerable holdings. The attack highlighted vulnerabilities in third-party dependencies within the open-source software ecosystem.

017

Anthem Data Breach Incident Analysis

Prevented by: PEC, EGR · Contained by: HSF

The Anthem Data Breach in 2015 exposed approximately 78.8 million records, including sensitive Personal Identifiable Information (PII) such as names, birthdates, medical IDs, and Social Security numbers. The breach was executed via a phishing campaign linked to a state-sponsored group, reportedly associated with Chinese cyberespionage activities. The attackers utilized sophisticated malware including Mivast and Sakula to infiltrate the network and execute data exfiltration without detection.

013

Home Depot Data Breach April 2014

Prevented by: HSF, PEC, EGR

The Home Depot data breach, occurring in April 2014, resulted in the theft of over 56 million payment card records through custom-built malware targeting point-of-sale systems across the US and Canada. Organized cybercriminal groups deployed POS-scraping malware using stolen vendor credentials, exfiltrating high volumes of financial data. This incident highlights significant vulnerabilities in third-party access management and the effectiveness of traditional security measures against advanced threats.

011

Target Data Breach 2013

Prevented by: HSF, PEC, EGR

The Target data breach of 2013 exposed approximately 110 million customer records, including 40 million credit and debit card numbers and 70 million sets of personal data. The breach occurred when attackers gained unauthorized access through compromised credentials from a third-party vendor, using RAM scraping malware to extract data from point-of-sale systems. This incident highlights significant security vulnerabilities in vendor management and network segmentation.

003

Google Aurora Incident

Prevented by: PEC, EGR

The Google Aurora Incident was a significant cyber attack in December 2009 targeting Google and other corporations. The attack, attributed to actors linked to the Chinese state, aimed to steal intellectual property and infiltrate Gmail accounts of Chinese human rights activists. Attackers exploited a zero-day vulnerability in Internet Explorer, using malware to gain unauthorized access and exfiltrate sensitive data.

002

Heartland Payment Systems Data Breach

Prevented by: PEC, EGR

The Heartland Payment Systems data breach in 2008 compromised approximately 130 million payment card records. The breach was executed using SQL injection attacks to install malware, capturing sensitive financial data such as credit card numbers over a prolonged period. Albert Gonzalez, a known cybercriminal, was attributed as the architect of this breach. The incident revealed significant vulnerabilities in Heartland’s transaction processes leading to substantial financial and reputational damage.

RSS feed for this tag →

Now playing Bandcamp