Leak site 'The Luna Moth Files' claims to expose internal Silent Ransom Group (Luna Moth) extortion operations material
Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗
Around October 5, 2026, an anonymous onion site called The Luna Moth Files claimed to expose internal material from Silent Ransom Group (SRG), also tracked as Luna Moth and UNC3753. The purported archive includes chat exports, a vishing document, screenshots and a purported fake employee résumé. The publisher and the way the archive was obtained are unknown, so Check Point treats all claims as unverified unless independently corroborated. The material contains no new exploit and no new malware. It does offer a view of how a social engineering-led data extortion operation may organize its work.
Technical Details
- The leak reportedly contains a vishing document, which is consistent with SRG's known social engineering-led approach.
- No new exploit, malware, CVEs or IOCs are reported in the excerpt.
- Authenticity and provenance of the archive are unverified.
Remediation
The excerpt gives no specific remediation guidance. Defenders should treat the leak as context on SRG tradecraft, validate any claims against independent sources, and keep awareness and verification procedures in place against vishing and help-desk style social engineering.
Linha do tempo
-
blog.checkpoint.com ↗ · pub. 09/10/2026 06:38 · coletado 19/10 17:57 primeiro registro só resumo do feed
Leak site 'The Luna Moth Files' claims to expose internal Silent Ransom Group (Luna Moth) extortion operations material
ler a análise desta fonte ocultar
Around October 5, 2026, an anonymous onion site called The Luna Moth Files claimed to expose internal material from Silent Ransom Group (SRG), also tracked as Luna Moth and UNC3753. The purported archive includes chat exports, a vishing document, screenshots and a purported fake employee résumé. The publisher and the way the archive was obtained are unknown, so Check Point treats all claims as unverified unless independently corroborated. The material contains no new exploit and no new malware. It does offer a view of how a social engineering-led data extortion operation may organize its work.
Technical Details
- The leak reportedly contains a vishing document, which is consistent with SRG's known social engineering-led approach.
- No new exploit, malware, CVEs or IOCs are reported in the excerpt.
- Authenticity and provenance of the archive are unverified.
Remediation
The excerpt gives no specific remediation guidance. Defenders should treat the leak as context on SRG tradecraft, validate any claims against independent sources, and keep awareness and verification procedures in place against vishing and help-desk style social engineering.