Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Cybersecurity researchers at Huntress have identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active…
Tag: extortion
LAPSUS$: Notorious Cyber Extortion Group
LAPSUS$ is a cyber extortion group that has targeted major corporations. As part of The Com collective, they have been associated with…
Ransomware Negotiator Sentenced to 70 Months for Aiding BlackCat Attacks
A 41-year-old former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for conspiring with the now-defunct BlackCat ransomware…
Proton Mail: Encrypted Email Service
The extortion contact email e78393397@proton.me was used in both the prior JADEPUFFER campaign and the ENCFORGE ransomware campaign.
JADEPUFFER: Agentic Ransomware Exploiting Langflow Flaw
The first known case of agentic ransomware, codenamed JADEPUFFER, where a human operator deployed an artificial agent to handle the entire extortion…
Octo Tempest: Alias for Scattered Spider Cybercriminal Group
Octo Tempest is an alternative tracking name for the Scattered Spider extortion crew, used by threat intelligence firms to identify the group's…
UNC3944: Mandiant’s Tracking Name for Scattered Spider
UNC3944 is Mandiant's designation for the threat actor group known as Scattered Spider. The group has been involved in numerous high-profile extortion…
Transport for London: Victim of Major Cyberattack in 2024
Transport for London (TfL) suffered a significant cyberattack in September 2024, attributed to Scattered Spider hackers. The attack disrupted services, compromised customer…
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
The ShinyHunters extortion crew exploited an unpatched remote code execution vulnerability in Oracle PeopleSoft (CVE-2026-35273) to breach enterprise systems, primarily targeting universities.…
Scattered Spider: Extortion Crew Behind Major Cyberattacks
Scattered Spider, also tracked as Octo Tempest, UNC3944, and 0ktapus, is an extortion crew known for data extortion, SIM swapping, and social…