cyber extortion
Fragmentation, Extortion & the New Ransomware Reality
As organizations improve their ability to recover from ransomware tactics in cyber extortion attacks, particularly through stronger backup and resilience strategies, attackers are under increasing pressure to extract value whenever they can ...
Security Boulevard
Understanding Illicit Ecosystems: The Hybrid Threat of “The Com”
Flashpoint | | cyber extortion, cyber threat intelligence, FEATURED, Lapsus$, scattered spider, ShinyHunters, the Com, threat actors
In this post, we dive into the decentralized architecture of “The Com,” exposing its hybrid ecosystem of hacking, extortion, and real-life violence—and how it fuels a ruthless pipeline of cyber-fraud cycles and ...
PTFM? Is It Legal to Pay the Hacker? Canvas, Uber and the Criminal Law of Cyber Extortion
Mark Rasch | | aml compliance, Canvas breach, cyber extortion, cybersecurity law, Instructure cyberattack, OFAC, Ransomware legality, Sanctions violation
This article highlights how the Canvas/Instructure breach exposes the complex and treacherous legal landscape of ransomware payments, moving beyond the business ethics of negotiation to the potential violations of sanctions regimes, anti-money ...
Security Boulevard
EdTech Firm Instructure Pays Ransom as U.S. House Starts Investigation
Jeffrey Burt | | bitsight, Canvas hack, Congress, cyber extortion, Higher Education Cybersecurity, Instructure hack, MalwareBytes, ransom payments, ShinyHunters, stolen data
EdTech firm Instructure said this week it paid the ransom to the ShinyHunters extortion group to regain control of its data more than a week after discovering the data breach and stolen ...
Security Boulevard
ADT Breach Exposes Data of 5.5 Million Customers, ShinyHunters Likely Behind Attack
Jeffrey Burt | | ADT, cyber extortion, Data breach, Have I Been Pwnd, Okta, Phishing, phishing kits, ShinyHunters, Silent Push, U.S. Securities and Exchange Commission, vishing as a service
The ShinyHunters extortion group is claiming responsibility for a breach of home and commercial security vendor ADT that exposed the data of 5.5 million customers. attack appears to be part of a ...
Security Boulevard
Cyber Fraud Cost Americans $17 Billion in 2025, AI Scams Make List: FBI
Jeffrey Burt | | AI scams, Akira ransomware, BEC scams, cryptocurrency, cyber extortion, cyberscam compounds, FBI, ic3 report, Investment Scams, Qilin, Ransomware, romance scams, sextortion scam
Cyber-driven fraud – from investment schemes to business email compromise (BEC) to confidence and romance scams – accounted for almost 85% of the losses Americans suffered through fraud crimes last year, totaling ...
Security Boulevard
So You Think You Have Cyber Insurance? The Breach is Only the First Incident. The Claim is the Second.
Mark Rasch | | AI fraud, business email compromise (BEC), coverage exclusions, cyber extortion, cyber insurance, cyber policy coverage, Cyber Risk Management, cybersecurity claims, Data breach, insurance disputes, insurance litigation, Network Security, OFAC compliance, professional liability, Ransomware
Explore the complexities of cyber insurance, including common claim denials, coverage disputes, and evolving risks like ransomware, AI fraud, and BEC. Learn how to navigate insurance ecosystems to secure reliable coverage that ...
Security Boulevard
Cl0p Ransomware Group Exploited a Zero-Day in Oracle EBS Attacks
Jeffrey Burt | | Cl0p Ransomware, cyber extortion, Google Threat Intelligence, Mandiant, Oracle E-Business Suite Security
The Cl0p ransomware group exploited a zero-day security flaw in Oracle's E-Business Suite to compromise corporate networks and steal data, according to Mandiant. The threat actors are sending emails to executives of ...
Security Boulevard
LockBit Hacker Sentenced To 4 Years Jail Plus Fined $860K
Wajahat Raja | | cryptocurrency, cyber extortion, Cyber Terrorism, cybercrime, Cybercrime Trends, Cybersecurity, Cybersecurity News, Data breach, Hacker Sentencing, International Cooperation, Justice System, law enforcement, Legal Proceedings, Lockbit, money laundering, Ransomware
Recent reports about legal proceedings, a 34-year-old Russian-Canadian national, Mikhail Vasiliev, has been handed a sentence of almost four years in Canadian prison. Vasiliev’s involvement in the global ransomware scheme known as ...
All About LAPSUS$: What We Know About the Extortionist Group
LAPSUS$ is an extortionist threat group that became active on December 10, 2021. Unlike the majority of extortionist groups that typically rely on a combination of ransomware and data leaks, LAPSUS$ is ...

