New Extortion Gang ScarlettGroup Puts Countdown Timers on Alleged Corporate Breaches
Researchers at Foresiet have identified a previously unseen extortion operation, dubbed ScarlettGroup, that lists alleged corporate victims on a dark web site complete with countdown timers pressuring them...
Ransomware Negotiator Allegedly Ran Extortion Site for ShinyHunters, FBI Probe Finds
Federal investigators suspect an executive at a major U.S. consulting firm helped ShinyHunters run a pressure site that pushed nearly 100 breached companies toward paying extortion demands. The...
Extradited Ryuk Ransomware Conspirator Sentenced to Federal Prison in Oregon Case
Karen Vardanyan, an Armenian national extradited from Ukraine, has been sentenced to 24 months in federal prison and ordered to pay more than $1.2 million in restitution for...
Chipmaker Analog Devices Confirms Breach as Extortion Group Claims 570,000 Stolen Records
Analog Devices has confirmed unauthorized access to internal systems and file exfiltration in an SEC filing, weeks after a group calling itself ExfilSquad listed the semiconductor giant on...
Prinz Eugen Ransomware Uses RemotePC RMM and PowerShell Stagers to Evade Detection
A new ransomware group is deploying the Go-based Prinz Eugen ransomware by abusing legitimate remote management software (RemotePC) and PowerShell stagers. The campaign has already hit major financial...
UNC3753 (Luna Moth) Escalates Campaign Against US Law Firms: Vishing, RMM Tools, and Now Physical Intrusion
Google Cloud Mandiant has documented a sustained UNC3753 (Luna Moth) campaign targeting US law firms from January–May 2026. The group uses vishing calls and RMM tools to exfiltrate...
Meet Pink: The New Extortion Group Using Vishing and Microsoft 365 Tools to Drain Enterprise Cloud Storage
A new extortion group called Pink (CL-CRI-1147) has emerged, targeting enterprise organizations through voice phishing to steal Microsoft 365 credentials and cloud files. With ties to the Com...
ShinyHunters Claims Cyberattack on U.S. Online Learning Platform — FBI Warns of Extortion Escalation
ShinyHunters has claimed responsibility for a cyberattack on a U.S.-based online Learning Management System, disrupting access for educational institutions nationwide. The FBI has issued a public service announcement...