The Com

Pink, a new extortion group possibly rebranded from BlackFile, uses voice phishing and fake helpdesk calls to steal credentials and extort organizations. Palo Alto Networks' Unit 42 and Google Threat Intelligence debate whether Pink is a new threat or an evolution of UNC6671, with similar tactics to groups like Lapsus$ and Scattered Spider.

A Tennessee man accused of abusing children and linked to the online extremist group 764 pleaded not guilty to charges including sexual exploitation and distribution of child sexual abuse material. The Justice Department alleges he victimized multiple children, with one victim later dying of an overdose, and FBI investigations uncovered extensive crimes dating back to 2022.

Cyberattacks by a neo-Nazi-infested criminal gang are funding violence and widespread crimes. The article highlights how security failures enable these attacks to generate resources for further criminal activities.

CrowdStrike reports two financially-motivated threat groups, Cordial Spider and Snarky Spider, are targeting U.S. organizations in critical sectors using voice-phishing and social engineering to steal data and conduct extortion campaigns. These groups, linked to Scattered Spider and The Com, exploit identity platforms and SaaS environments, with extortion demands often reaching seven figures.

BlackFile, a cyber extortion group linked to The Com, is targeting retail and hospitality organizations via voice-phishing and social engineering to steal data and demand ransoms. The group, tracked under aliases like CL-CRI-1116 and Cordial Spider, uses SaaS environments and data-leak sites to pressure victims, with attacks ongoing since February 2025.

Tyler Robert Buchanan, a core leader of the Scattered Spider cybercrime group, pleaded guilty to federal charges for orchestrating phishing attacks and cryptocurrency thefts totaling over $8 million. Arrested in Spain in 2024, he faces up to 22 years in prison and was described as a pivotal figure in the hacker subset of The Com.