Money Message surfaced on tracking systems in early July 2026 and has claimed four victims to date, with two posted in the last 30 days, spanning transportation, energy, and professional services targets in what appears to be an opportunistic rather than sector-focused campaign. No sector or country breakdown is available from current data, and no MITRE ATT&CK technique catalogue has been logged for this group, limiting technical characterization at this stage. The pace, roughly one claim per week since first appearance, suggests an active but still small-scale operation. Any operational details beyond victim naming and timing remain unconfirmed and should be treated as claims pending independent verification.