#cyberextortion — Public Fediverse posts

Ransomware is getting uglier as cybercriminals fake leaks and skip encryption entirely

https://fed.brid.gy/r/https://nerds.xyz/2026/04/ransomware-q1-2026/

Ransomware is getting uglier as cybercriminals fake leaks and skip encryption entirely

https://fed.brid.gy/r/https://nerds.xyz/2026/04/ransomware-q1-2026/

Germany Faces Resurgence in Cyber Extortion Attacks

Germany has taken a concerning leap to the forefront of Europe's cyber extortion crisis, with a 92% surge in data leak victims listed in 2025 - nearly triple the European average. This alarming trend highlights the country's growing vulnerability to targeted cyber attacks.

https://osintsights.com/germany-faces-resurgence-in-cyber-extortion-attacks?utm_source=mastodon&utm_medium=social

#CyberExtortion #Germany #Europe #DataExtortion #EmergingThreats

Germany Faces Resurgence in Cyber Extortion Attacks

Germany has taken a concerning leap to the forefront of Europe's cyber extortion crisis, with a 92% surge in data leak victims listed in 2025 - nearly triple the European average. This alarming trend highlights the country's growing vulnerability to targeted cyber attacks.

https://osintsights.com/germany-faces-resurgence-in-cyber-extortion-attacks?utm_source=mastodon&utm_medium=social

#CyberExtortion #Germany #Europe #DataExtortion #EmergingThreats

Incident Overview:
Victim: Odido
Threat Actor: ShinyHunters (alleged)
Impact: 6.2M customers confirmed
Claimed Records: ~21M

Vector: Customer contact system access
Exposed data (varies per user):
• PII, contact details
• IBANs
• Limited ID metadata

Denied exposure:
• Passwords
• Billing data
• SSNs
ShinyHunters’ known TTPs include vishing, SSO hijack, OAuth device code abuse, targeting platforms tied to Microsoft, Google, and Okta.
Identity remains the breach multiplier.
Source: https://www.bleepingcomputer.com/news/security/shinyhunters-extortion-gang-claims-odido-breach-affecting-millions/

Follow TechNadu for threat-focused reporting,
Add your technical insights below.

#Infosec #ThreatIntel #DataBreach #ShinyHunters #Odido #IAM #SSO #MFA #CyberExtortion #PrivacyEngineering #SecurityOperations

Incident Overview:
Victim: Odido
Threat Actor: ShinyHunters (alleged)
Impact: 6.2M customers confirmed
Claimed Records: ~21M

Vector: Customer contact system access
Exposed data (varies per user):
• PII, contact details
• IBANs
• Limited ID metadata

Denied exposure:
• Passwords
• Billing data
• SSNs
ShinyHunters’ known TTPs include vishing, SSO hijack, OAuth device code abuse, targeting platforms tied to Microsoft, Google, and Okta.
Identity remains the breach multiplier.
Source: https://www.bleepingcomputer.com/news/security/shinyhunters-extortion-gang-claims-odido-breach-affecting-millions/

Follow TechNadu for threat-focused reporting,
Add your technical insights below.

#Infosec #ThreatIntel #DataBreach #ShinyHunters #Odido #IAM #SSO #MFA #CyberExtortion #PrivacyEngineering #SecurityOperations

Incident Overview:
Victim: Odido
Threat Actor: ShinyHunters (alleged)
Impact: 6.2M customers confirmed
Claimed Records: ~21M

Vector: Customer contact system access
Exposed data (varies per user):
• PII, contact details
• IBANs
• Limited ID metadata

Denied exposure:
• Passwords
• Billing data
• SSNs
ShinyHunters’ known TTPs include vishing, SSO hijack, OAuth device code abuse, targeting platforms tied to Microsoft, Google, and Okta.
Identity remains the breach multiplier.
Source: https://www.bleepingcomputer.com/news/security/shinyhunters-extortion-gang-claims-odido-breach-affecting-millions/

Follow TechNadu for threat-focused reporting,
Add your technical insights below.

#Infosec #ThreatIntel #DataBreach #ShinyHunters #Odido #IAM #SSO #MFA #CyberExtortion #PrivacyEngineering #SecurityOperations

Incident Overview:
Victim: Odido
Threat Actor: ShinyHunters (alleged)
Impact: 6.2M customers confirmed
Claimed Records: ~21M

Vector: Customer contact system access
Exposed data (varies per user):
• PII, contact details
• IBANs
• Limited ID metadata

Denied exposure:
• Passwords
• Billing data
• SSNs
ShinyHunters’ known TTPs include vishing, SSO hijack, OAuth device code abuse, targeting platforms tied to Microsoft, Google, and Okta.
Identity remains the breach multiplier.
Source: https://www.bleepingcomputer.com/news/security/shinyhunters-extortion-gang-claims-odido-breach-affecting-millions/

Follow TechNadu for threat-focused reporting,
Add your technical insights below.

#Infosec #ThreatIntel #DataBreach #ShinyHunters #Odido #IAM #SSO #MFA #CyberExtortion #PrivacyEngineering #SecurityOperations

Incident Overview:
Victim: Odido
Threat Actor: ShinyHunters (alleged)
Impact: 6.2M customers confirmed
Claimed Records: ~21M

Vector: Customer contact system access
Exposed data (varies per user):
• PII, contact details
• IBANs
• Limited ID metadata

Denied exposure:
• Passwords
• Billing data
• SSNs
ShinyHunters’ known TTPs include vishing, SSO hijack, OAuth device code abuse, targeting platforms tied to Microsoft, Google, and Okta.
Identity remains the breach multiplier.
Source: https://www.bleepingcomputer.com/news/security/shinyhunters-extortion-gang-claims-odido-breach-affecting-millions/

Follow TechNadu for threat-focused reporting,
Add your technical insights below.

#Infosec #ThreatIntel #DataBreach #ShinyHunters #Odido #IAM #SSO #MFA #CyberExtortion #PrivacyEngineering #SecurityOperations

Incident Summary:
Victim: Wynn Resorts
Threat Actor: ShinyHunters
Impact: Employee data accessed
Claim: 800k+ PII records
Alleged vector: Oracle PeopleSoft environment

Operational notes:
• Incident response + external experts engaged
• Leak site entry removed
• Credit monitoring deployed

ShinyHunters TTPs historically include:
– Vishing against SSO
– OAuth token abuse
– Device code phishing targeting Entra / identity ecosystems
– SaaS data exfiltration
Identity is the pivot point.

Source: https://www.bleepingcomputer.com/news/security/wynn-resorts-confirms-employee-data-breach-after-extortion-threat/

Follow us for tactical threat briefings.
Share detection or IAM hardening insights below.
#Infosec #ThreatIntel #IdentitySecurity #SSO #MFA #ShinyHunters #CyberExtortion #DataProtection #IAM #SOC #BlueTeam #SecurityEngineering

Incident Summary:
Victim: Wynn Resorts
Threat Actor: ShinyHunters
Impact: Employee data accessed
Claim: 800k+ PII records
Alleged vector: Oracle PeopleSoft environment

Operational notes:
• Incident response + external experts engaged
• Leak site entry removed
• Credit monitoring deployed

ShinyHunters TTPs historically include:
– Vishing against SSO
– OAuth token abuse
– Device code phishing targeting Entra / identity ecosystems
– SaaS data exfiltration
Identity is the pivot point.

Source: https://www.bleepingcomputer.com/news/security/wynn-resorts-confirms-employee-data-breach-after-extortion-threat/

Follow us for tactical threat briefings.
Share detection or IAM hardening insights below.
#Infosec #ThreatIntel #IdentitySecurity #SSO #MFA #ShinyHunters #CyberExtortion #DataProtection #IAM #SOC #BlueTeam #SecurityEngineering

Incident Summary:
Victim: Wynn Resorts
Threat Actor: ShinyHunters
Impact: Employee data accessed
Claim: 800k+ PII records
Alleged vector: Oracle PeopleSoft environment

Operational notes:
• Incident response + external experts engaged
• Leak site entry removed
• Credit monitoring deployed

ShinyHunters TTPs historically include:
– Vishing against SSO
– OAuth token abuse
– Device code phishing targeting Entra / identity ecosystems
– SaaS data exfiltration
Identity is the pivot point.

Source: https://www.bleepingcomputer.com/news/security/wynn-resorts-confirms-employee-data-breach-after-extortion-threat/

Follow us for tactical threat briefings.
Share detection or IAM hardening insights below.
#Infosec #ThreatIntel #IdentitySecurity #SSO #MFA #ShinyHunters #CyberExtortion #DataProtection #IAM #SOC #BlueTeam #SecurityEngineering

Incident Summary:
Victim: Wynn Resorts
Threat Actor: ShinyHunters
Impact: Employee data accessed
Claim: 800k+ PII records
Alleged vector: Oracle PeopleSoft environment

Operational notes:
• Incident response + external experts engaged
• Leak site entry removed
• Credit monitoring deployed

ShinyHunters TTPs historically include:
– Vishing against SSO
– OAuth token abuse
– Device code phishing targeting Entra / identity ecosystems
– SaaS data exfiltration
Identity is the pivot point.

Source: https://www.bleepingcomputer.com/news/security/wynn-resorts-confirms-employee-data-breach-after-extortion-threat/

Follow us for tactical threat briefings.
Share detection or IAM hardening insights below.
#Infosec #ThreatIntel #IdentitySecurity #SSO #MFA #ShinyHunters #CyberExtortion #DataProtection #IAM #SOC #BlueTeam #SecurityEngineering

Security Navigator 2026 reveals cybercrime is industrializing and now sits at the epicenter of geopolitical dynamics. A common battle front is needed

Industrialized cybercrime drives explosion of cyber-extortionSince 2020, the number of victims of Cy-X has tripled…
#UnitedStates #US #USA #america #cyberextortion #cybercrime #GeopoliticalDynamics #geopolitics #Politics #SecurityNavigator2026 #unitedstatesofamerica #UnitedStatesPolitics #USPolitics #usapolitics
https://www.europesays.com/2619603/

Europe’s Ransomware Attacks Surge to Record Highs in 2024 https://www.byteseu.com/1508556/ #CriticalInfrastructureVulnerabilities #CyberExtortion #Europe #EuropeanCybersecurity #LegacyTechnologyRisk #NsomwareAttacks

Ransomware attackers are cashing in less as companies beef up their cyber defenses. Could smarter security be the game changer in the battle against extortion? Dive into the details behind this record low trend.

https://thedefendopsdiaries.com/ransomware-payments-hit-record-low-as-organizations-strengthen-defenses/

#ransomware
#cybersecurity
#databreach
#threatintelligence
#cyberextortion

Ransomware attackers are cashing in less as companies beef up their cyber defenses. Could smarter security be the game changer in the battle against extortion? Dive into the details behind this record low trend.

https://thedefendopsdiaries.com/ransomware-payments-hit-record-low-as-organizations-strengthen-defenses/

#ransomware
#cybersecurity
#databreach
#threatintelligence
#cyberextortion

Ransomware attackers are cashing in less as companies beef up their cyber defenses. Could smarter security be the game changer in the battle against extortion? Dive into the details behind this record low trend.

https://thedefendopsdiaries.com/ransomware-payments-hit-record-low-as-organizations-strengthen-defenses/

#ransomware
#cybersecurity
#databreach
#threatintelligence
#cyberextortion

Ransomware attackers are cashing in less as companies beef up their cyber defenses. Could smarter security be the game changer in the battle against extortion? Dive into the details behind this record low trend.

https://thedefendopsdiaries.com/ransomware-payments-hit-record-low-as-organizations-strengthen-defenses/

#ransomware
#cybersecurity
#databreach
#threatintelligence
#cyberextortion

Envoy Air just got hit by Clop ransomware exploiting a zero-day in Oracle’s suite—what hidden vulnerabilities might be putting your business at risk?

https://thedefendopsdiaries.com/clop-ransomwares-zero-day-exploits-the-envoy-air-breach-and-its-broader-implications/

#clopransomware
#zerodayvulnerabilities
#envoyairbreach
#cybersecurity2025
#databreach
#oracleebusiness
#ransomwareattack
#infosectrends
#enterprisesecurity
#cyberextortion

Envoy Air just got hit by Clop ransomware exploiting a zero-day in Oracle’s suite—what hidden vulnerabilities might be putting your business at risk?

https://thedefendopsdiaries.com/clop-ransomwares-zero-day-exploits-the-envoy-air-breach-and-its-broader-implications/

#clopransomware
#zerodayvulnerabilities
#envoyairbreach
#cybersecurity2025
#databreach
#oracleebusiness
#ransomwareattack
#infosectrends
#enterprisesecurity
#cyberextortion

Envoy Air just got hit by Clop ransomware exploiting a zero-day in Oracle’s suite—what hidden vulnerabilities might be putting your business at risk?

https://thedefendopsdiaries.com/clop-ransomwares-zero-day-exploits-the-envoy-air-breach-and-its-broader-implications/

#clopransomware
#zerodayvulnerabilities
#envoyairbreach
#cybersecurity2025
#databreach
#oracleebusiness
#ransomwareattack
#infosectrends
#enterprisesecurity
#cyberextortion

Envoy Air just got hit by Clop ransomware exploiting a zero-day in Oracle’s suite—what hidden vulnerabilities might be putting your business at risk?

https://thedefendopsdiaries.com/clop-ransomwares-zero-day-exploits-the-envoy-air-breach-and-its-broader-implications/

#clopransomware
#zerodayvulnerabilities
#envoyairbreach
#cybersecurity2025
#databreach
#oracleebusiness
#ransomwareattack
#infosectrends
#enterprisesecurity
#cyberextortion

Clop ransomware just turned an unpatched Oracle flaw into a multi-million-dollar data heist—how secure is your system?

https://thedefendopsdiaries.com/clop-ransomware-exploits-oracle-ebs-zero-day-in-major-2025-data-heist/

#clopransomware
#oracleebs
#zeroday
#databreach
#cyberextortion

Clop ransomware just turned an unpatched Oracle flaw into a multi-million-dollar data heist—how secure is your system?

https://thedefendopsdiaries.com/clop-ransomware-exploits-oracle-ebs-zero-day-in-major-2025-data-heist/

#clopransomware
#oracleebs
#zeroday
#databreach
#cyberextortion

Clop ransomware just turned an unpatched Oracle flaw into a multi-million-dollar data heist—how secure is your system?

https://thedefendopsdiaries.com/clop-ransomware-exploits-oracle-ebs-zero-day-in-major-2025-data-heist/

#clopransomware
#oracleebs
#zeroday
#databreach
#cyberextortion

Clop ransomware just turned an unpatched Oracle flaw into a multi-million-dollar data heist—how secure is your system?

https://thedefendopsdiaries.com/clop-ransomware-exploits-oracle-ebs-zero-day-in-major-2025-data-heist/

#clopransomware
#oracleebs
#zeroday
#databreach
#cyberextortion

ShinyHunters just exploited trusted OAuth apps to steal 1.5 billion Salesforce records—from giants like Google and Cisco. How did a simple vishing trick bring down the wall of corporate security? Discover the tactics behind the breach.

https://thedefendopsdiaries.com/the-shinyhunters-salesforce-breach-tactics-impact-and-lessons-for-2024/

#shinyhunters
#salesforcebreach
#cyberextortion
#oauthsecurity
#databreach2024

ShinyHunters just exploited trusted OAuth apps to steal 1.5 billion Salesforce records—from giants like Google and Cisco. How did a simple vishing trick bring down the wall of corporate security? Discover the tactics behind the breach.

https://thedefendopsdiaries.com/the-shinyhunters-salesforce-breach-tactics-impact-and-lessons-for-2024/

#shinyhunters
#salesforcebreach
#cyberextortion
#oauthsecurity
#databreach2024

ShinyHunters just exploited trusted OAuth apps to steal 1.5 billion Salesforce records—from giants like Google and Cisco. How did a simple vishing trick bring down the wall of corporate security? Discover the tactics behind the breach.

https://thedefendopsdiaries.com/the-shinyhunters-salesforce-breach-tactics-impact-and-lessons-for-2024/

#shinyhunters
#salesforcebreach
#cyberextortion
#oauthsecurity
#databreach2024

Oracle E-Business Suite users are getting a wake-up call! The Clop ransomware gang is using mass extortion emails to stir up panic and pressure companies—could your security be next? Read more to see how they’re evolving their tactics.

https://thedefendopsdiaries.com/clop-ransomware-gang-targets-oracle-e-business-suite-in-latest-extortion-campaign/

#clop
#ransomware
#oracleebusinesssuite
#cyberextortion
#zeroday
#cybersecurity
#databreach
#threatintel
#infosec

Oracle E-Business Suite users are getting a wake-up call! The Clop ransomware gang is using mass extortion emails to stir up panic and pressure companies—could your security be next? Read more to see how they’re evolving their tactics.

https://thedefendopsdiaries.com/clop-ransomware-gang-targets-oracle-e-business-suite-in-latest-extortion-campaign/

#clop
#ransomware
#oracleebusinesssuite
#cyberextortion
#zeroday
#cybersecurity
#databreach
#threatintel
#infosec

Oracle E-Business Suite users are getting a wake-up call! The Clop ransomware gang is using mass extortion emails to stir up panic and pressure companies—could your security be next? Read more to see how they’re evolving their tactics.

https://thedefendopsdiaries.com/clop-ransomware-gang-targets-oracle-e-business-suite-in-latest-extortion-campaign/

#clop
#ransomware
#oracleebusinesssuite
#cyberextortion
#zeroday
#cybersecurity
#databreach
#threatintel
#infosec

Cyber extortion just got a high-tech twist. The Silent Ransom Group is bypassing traditional ransomware with clever social engineering tactics to hit law firms and high-value targets—demanding millions in ransom. How vulnerable is your system?

https://thedefendopsdiaries.com/the-silent-ransom-group-a-new-era-of-cyber-extortion/

#cyberextortion
#silentransomgroup
#infosectrends
#socialengineering
#cybersecurity2025

Cyber extortion just got a high-tech twist. The Silent Ransom Group is bypassing traditional ransomware with clever social engineering tactics to hit law firms and high-value targets—demanding millions in ransom. How vulnerable is your system?

https://thedefendopsdiaries.com/the-silent-ransom-group-a-new-era-of-cyber-extortion/

#cyberextortion
#silentransomgroup
#infosectrends
#socialengineering
#cybersecurity2025

Cyber extortion just got a high-tech twist. The Silent Ransom Group is bypassing traditional ransomware with clever social engineering tactics to hit law firms and high-value targets—demanding millions in ransom. How vulnerable is your system?

https://thedefendopsdiaries.com/the-silent-ransom-group-a-new-era-of-cyber-extortion/

#cyberextortion
#silentransomgroup
#infosectrends
#socialengineering
#cybersecurity2025

When a breach forces a company into a moral dilemma—protect student data by paying cybercriminals or risk exposing it all—what's the right call? Discover the ethics and hidden risks behind PowerSchool's bold move.

https://thedefendopsdiaries.com/navigating-the-complexities-of-the-powerschool-data-breach/

#powerschoolbreach
#cyberextortion
#dataprotection
#ransomware
#cybersecurity

When a breach forces a company into a moral dilemma—protect student data by paying cybercriminals or risk exposing it all—what's the right call? Discover the ethics and hidden risks behind PowerSchool's bold move.

https://thedefendopsdiaries.com/navigating-the-complexities-of-the-powerschool-data-breach/

#powerschoolbreach
#cyberextortion
#dataprotection
#ransomware
#cybersecurity

Ukrainian Extradited to U.S. Over Global Ransomware Scheme Using Nefilim Strain https://thecyberexpress.com/ukrainian-extradited-for-nefilim-ransomware/ #TheCyberExpressNews #Nefilimransomware #ransomwarestrain #TheCyberExpress #CyberExtortion #FirewallDaily #cybercrime #CyberNews

Ukrainian Extradited to U.S. Over Global Ransomware Scheme Using Nefilim Strain https://thecyberexpress.com/ukrainian-extradited-for-nefilim-ransomware/ #TheCyberExpressNews #Nefilimransomware #ransomwarestrain #TheCyberExpress #CyberExtortion #FirewallDaily #cybercrime #CyberNews

Ukrainian Extradited to U.S. Over Global Ransomware Scheme Using Nefilim Strain https://thecyberexpress.com/ukrainian-extradited-for-nefilim-ransomware/ #TheCyberExpressNews #Nefilimransomware #ransomwarestrain #TheCyberExpress #CyberExtortion #FirewallDaily #cybercrime #CyberNews

Ukrainian Extradited to U.S. Over Global Ransomware Scheme Using Nefilim Strain https://thecyberexpress.com/ukrainian-extradited-for-nefilim-ransomware/ #TheCyberExpressNews #Nefilimransomware #ransomwarestrain #TheCyberExpress #CyberExtortion #FirewallDaily #cybercrime #CyberNews

Hackers Exploited AWS ENV Files to Attack 110,000 Domains & Steal Credentials https://cybersecuritynews.com/aws-env-extortion-110k-domains/ #CyberSecurityNews #cybersecuritynews #AWSVulnerability #CyberExtortion #cloudsecurity #DataBreaches #CyberAttack #cloud

Hackers Exploited AWS ENV Files to Attack 110,000 Domains & Steal Credentials https://cybersecuritynews.com/aws-env-extortion-110k-domains/ #CyberSecurityNews #cybersecuritynews #AWSVulnerability #CyberExtortion #cloudsecurity #DataBreaches #CyberAttack #cloud

Hackers Exploited AWS ENV Files to Attack 110,000 Domains & Steal Credentials https://cybersecuritynews.com/aws-env-extortion-110k-domains/ #CyberSecurityNews #cybersecuritynews #AWSVulnerability #CyberExtortion #cloudsecurity #DataBreaches #CyberAttack #cloud

Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments https://cybersecuritynews.com/massive-aws-cyber-attack-230-million-environments/ #CyberExtortion #cloudsecurity #DataBreaches #CyberAttack #AWSBreach #cloud

Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments https://cybersecuritynews.com/massive-aws-cyber-attack-230-million-environments/ #CyberExtortion #cloudsecurity #DataBreaches #CyberAttack #AWSBreach #cloud

Massive Cyber Attack On AWS Targets 230 Million Unique Cloud Environments https://cybersecuritynews.com/massive-aws-cyber-attack-230-million-environments/ #CyberExtortion #cloudsecurity #DataBreaches #CyberAttack #AWSBreach #cloud

One of the largest ransomware payouts that’s become public was reported Tuesday by cloud security firm Zscaler. #Ransomware #Zscaler #DarkAngels #ZeroTrust #CyberExtortion #ITOTConvergence
https://jpmellojr.blogspot.com/2024/07/75m-ransomware-payment-exposed-in-new.html

Africa, and specifically South Africa, saw a significant increase in cyber extortion — more commonly known as ransomware — attacks between Q2 2023 and Q1 2024.

This is according to Cyberdefense senior security researcher Wicus Ross, who said South Africa’s victim count increased by 107% over the period.

https://mybroadband.co.za/news/security/536847-south-africa-hit-by-cyber-extortion-attacks.html #SouthAfrica #Africa #cyberCrime #cyberExtortion #cyberSecurity #security #ransomware