11 casos · pág. 1/1
In August 2026, the food and animal safety company Neogen was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed to have obtained from Neogen. The data consists largely of corporate contact records and includes 436k unique email addresses drawn from mailing lists, employee records and oth…
The Semperis 2026 Ransomware Risk Report, published on October 14, warns that ransomware operators are increasingly threatening the physical safety of CISOs, executives and other senior staff at victim organizations to force payment. The report says a quarter of ransomware campaigns now involve psychological or physical threats against em…
Two official Twitter/X accounts of Ireland's police service, Garda Síochána, were accessed by an unauthorised third party on Wednesday evening and used to post cryptocurrency-related messages. The posts claimed followers could claim free cryptocurrency through an airdrop, a lure that can trick victims into handing over wallet keys and hav…
In September 2026, Swiss medical device company Medela was targeted in a ShinyHunters "pay or leak" extortion campaign. The data allegedly obtained in the breach was later published and covers about 424k unique email addresses, mostly belonging to healthcare professionals, Medela staff and sales leads. Have I Been Pwned added the dataset …
In August 2026, data centre operator CyrusOne was targeted in a ShinyHunters "pay or leak" extortion attempt. The group later published data allegedly stolen from the company, covering about 373k unique email addresses across records for users, sales leads and CyrusOne employees. The data is mostly corporate contact information, and also …
In January 2026, the company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly stolen from the company was later published, covering about 560k unique email addresses, mostly belonging to leads and business contacts. Crunchbase subsequently confirmed that a threat actor had exf…
Nord Security reports 2,894 ransomware attacks between July and September 2026, a 50% increase year over year and an 8.6% rise over Q2 2026. Researchers attribute the rebound to the market stabilizing after law enforcement takedowns of LockBit, BlackCat and RansomHub, which suppressed activity during 2025. The Gentlemen (383 attacks) narr…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
U.S. Army soldier Cameron John Wagenius (alias Kiberphant0m), 22, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking multiple telecommunications companies and stealing call and text metadata for more than 100 million AT&T customers in 2024. Working with co-c…
ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…
A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …
