ThreatVectr
Tag

#data extortion

9 stories taggeddata extortion.

Illustration: a dimly lit interrogation room with an empty metal chair under a hanging ceiling lamp
Threat Intelligence

Jordan Detains Alleged ShinyHunters Member 'Rey' in FBI-Linked Operation

A suspect tied to the prolific extortion crew is reportedly cooperating with U.S. investigators after a September arrest.

3 min read
Berlin's government building entrance photographed from street level at dusk, official flags hanging limply, security cameras visible on the facade
Ransomware

Rhysida gang claims theft of 5.79TB from Berlin's city government

The ransomware crew says it took 1.44 million files, including water-supply security assessments and plaintext passwords. Berlin's mayor says the city will not pay.

3 min read
Illustration: a cluttered office desk at night, glowing keyboard, several browser windows reflected on a dark monitor
Threat Intelligence

Ransomware Gang Claims Bosch and Synopsys Hacks. Synopsys Says It Sees Nothing.

A criminal group called D1R says it stole sensitive data from two major companies and will publish it unless it gets paid. One of those companies is pushing back.

3 min read
Illustration: a modern office at dusk, glass doors held slightly open with a keycard dangling from a lanyard on the handle
Identity & Access

How ShinyHunters walked into Salesforce accounts without breaking anything

Microsoft says a year of data theft from Salesforce tenants leaned on trusted app connections, not a platform bug.

3 min read
Illustration: a modern office desk with a smartphone lying face-up showing an incoming call
Identity & Access

Criminals Are Calling Your Staff and Stealing Microsoft 365 Logins in Real Time

A hacking group is phoning employees, sending them to fake Microsoft Entra ID login pages, and quietly registering their own passkeys before anyone notices. Okta has the details.

3 min read
Illustration: a dimly lit government office corridor at night
Ransomware

A U.S. Government Agency Quietly Paid $1 Million to a Group That May Not Even Be Ransomware

A leaked negotiation chat and blockchain trail suggest Kairos runs pure data-theft extortion: no file-locking, just threats to leak.

3 min read
Illustration: a large server room with rows of illuminated rack-mounted servers bathed in cool blue and orange ambient light
Vulnerabilities

Oracle Patches PeopleSoft Flaw Tied to ShinyHunters Activity, Stays Quiet on Zero-Day Status

CVE-2026-35273 has a fix. Whether attackers got there first is a question Oracle isn't answering.

2 min read
Illustration: an empty modern law-firm reception desk at dusk
Threat Intelligence

UNC3753 Hit U.S. Professional Services Firms With Vishing and Walk-In Intrusions

Dozens of legal and financial firms were hit between January and May 2026 in a data-theft extortion campaign that blended phone-based social engineering with physical office visits.

3 min read
Illustration: a classroom with a laptop showing a hacked login page, symbolizing a cyber attack on education
Breaches

The Login Page That Demanded a Ransom

ShinyHunters defaced Canvas mid-finals week, taking the learning platform offline and exposing what one researcher calls an eight-month attack arc against Instructure.

3 min read
© 2026 Threat Vectr