https://blog.dansec.red/actors/unc6780/Recent content in UNC6780 on DanSec DailyHugoen-gbThu, 09 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-09-cybersecurity-news/Thu, 09 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-09-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li> <p><strong>Bitcoin Depot Hack</strong></p> <ul> <li>Bitcoin Depot, a major Bitcoin ATM operator, reported a breach in which attackers stole approximately $3.665 million from its crypto wallets. Attackers gained access to credentials and transferred over 50 bitcoins out of company wallets.</li> </ul> </li> <li> <p><strong>Massachusetts Hospital Cyberattack</strong></p> <ul> <li>Signature Healthcare in Massachusetts experienced a cyberattack that forced ambulance diversions, cancellation of some services, and disruption of pharmacy operations.</li> </ul> </li> <li> <p><strong>Zendesk Ticket Theft by UNC6783</strong></p> <ul> <li>Threat actor UNC6783 compromised business process outsourcing (BPO) providers to steal corporate Zendesk support tickets from high-value companies across multiple sectors.</li> </ul> </li> <li> <p><strong>Magento E-commerce Card Skimming Campaign</strong></p> <ul> <li>Nearly 100 online stores running the Magento platform were impacted by a campaign embedding credit card-stealing code within a pixel-sized SVG image.</li> </ul> </li> <li> <p><strong>TeamPCP Supply Chain Attack Update</strong></p> <ul> <li>TeamPCP supply chain campaign update reveals Cisco source code was stolen via a breach linked to the Trivy security scanner. Google GTIG tracks the group as UNC6780.</li> </ul> </li> </ul>