Ransomware Alliance 'Trinity of Chaos' Leaks Major Data

A new ransomware collective, "Trinity of Chaos," linked to notorious groups like Lapsus$ and ShinyHunters, has launched a data leak site on the TOR network. The site lists 39 major global corporations, publishing previously undisclosed data from past breaches rather than claiming new attacks. The group is employing unusual extortion tactics, such as threatening to assist in litigation against victims like Salesforce unless a ransom is paid. Security researchers believe the data, allegedly totaling over 1.5 billion records, was likely obtained through stolen OAuth tokens and vishing attacks. Experts warn that the release of this massive trove of information could fuel widespread phishing campaigns, identity theft, and malicious AI-driven data mining.

Latest mentioned: 10-06

Earliest mentioned: 10-06

Sources

securityonline.info infosecurity-magazine.com cybersum.net

Also Read

Lampion Banking Trojan Evolves with New Social Engineering Tactics

A cybercriminal group has refined its malware campaign by incorporating innovative social engineering techniques and multi-stage infection chains to deliver the Lampion banking trojan. The campaign, active since 2019, targets Portuguese-speaking banks and uses complex infection methods to evade detection. Researchers have documented significant tactical evolution, including the use of ClickFix lures and compromised email accounts. The phishing emails employ convincing banking themes, and the infection chain comprises multiple obfuscated Visual Basic script stages. The Lampion stealer has evolved into a single 700MB DLL file, incorporating encrypted ZIP files to hinder detection.

10-31Read more →