The Com

A Canadian man pleaded guilty to a major cyberattack involving the theft of sensitive data from over 165 Snowflake customer environments, leading to extortion and significant financial losses for companies like AT&T and Santander. He and his co-conspirators stole billions of records and earned over $2.5 million in extortion payments.

Europol and partners flagged 4,340 URLs linked to The Com, an online network engaged in hacking, swatting, extortion, and physical violence. The crackdown, part of Project Compass, involved agencies across the US, UK, and EU member states, targeting content recruiting minors and promoting violent acts like blood walls and cut-signs.

Europol has flagged 4,340 URLs for removal during a multi-week operation targeting online content linked to 'The Com,' a loosely organized network of nihilistic violent extremist groups.

Thalha Jubair and Owen Flowers, leading members of Scattered Spider, were sentenced to 66 months in jail for a 2024 cyberattack on Transport for London. They pleaded guilty in September 2025 after being arrested and are linked to over 120 cyberattacks, including an extortion campaign involving $89.5 million in cryptocurrency.

Pink, a new extortion group possibly rebranded from BlackFile, uses voice phishing and fake helpdesk calls to steal credentials and extort organizations. Palo Alto Networks' Unit 42 and Google Threat Intelligence debate whether Pink is a new threat or an evolution of UNC6671, with similar tactics to groups like Lapsus$ and Scattered Spider.

A Tennessee man accused of abusing children and linked to the online extremist group 764 pleaded not guilty to charges including sexual exploitation and distribution of child sexual abuse material. The Justice Department alleges he victimized multiple children, with one victim later dying of an overdose, and FBI investigations uncovered extensive crimes dating back to 2022.

Cyberattacks by a neo-Nazi-infested criminal gang are funding violence and widespread crimes. The article highlights how security failures enable these attacks to generate resources for further criminal activities.

CrowdStrike reports two financially-motivated threat groups, Cordial Spider and Snarky Spider, are targeting U.S. organizations in critical sectors using voice-phishing and social engineering to steal data and conduct extortion campaigns. These groups, linked to Scattered Spider and The Com, exploit identity platforms and SaaS environments, with extortion demands often reaching seven figures.

BlackFile, a cyber extortion group linked to The Com, is targeting retail and hospitality organizations via voice-phishing and social engineering to steal data and demand ransoms. The group, tracked under aliases like CL-CRI-1116 and Cordial Spider, uses SaaS environments and data-leak sites to pressure victims, with attacks ongoing since February 2025.

Tyler Robert Buchanan, a core leader of the Scattered Spider cybercrime group, pleaded guilty to federal charges for orchestrating phishing attacks and cryptocurrency thefts totaling over $8 million. Arrested in Spain in 2024, he faces up to 22 years in prison and was described as a pivotal figure in the hacker subset of The Com.