DragonForce ransomware group lists Taurus Investment Holdings (tiholdings.com), claiming to have stolen 252 GB of data. The company is a global commercial real estate investment and development firm.
INC ransomware group lists smartphone and consumer tech company Nothing, claiming to have stolen 52 GB of data. The group says the haul includes confidential documents, client data, NDAs, financial records, operational and corporate data, business agreements, and technology-related materials.
π3π₯1
A criminal complaint was unsealed in Alaska today charging a Canadian man with operating the KimWolf DDoS botnet. The U.S. complaint was unsealed following the defendantβs arrest in Canada by Canadian authorities.
On April 10, 2026, U.S. authorities criminally charged Jacob Butler, aka βDort,β 23, of Ottawa, with offenses related to the development & operation of the KimWolf botnet. KimWolf was a DDoS-for-hire service which infected over a million devices worldwide, including devices in Alaska.
For more info, read the press release at https://www.justice.gov/usao-ak/pr/canadian-man-arrested-international-authorities-charged-administrating-kimwolf-ddos
On April 10, 2026, U.S. authorities criminally charged Jacob Butler, aka βDort,β 23, of Ottawa, with offenses related to the development & operation of the KimWolf botnet. KimWolf was a DDoS-for-hire service which infected over a million devices worldwide, including devices in Alaska.
For more info, read the press release at https://www.justice.gov/usao-ak/pr/canadian-man-arrested-international-authorities-charged-administrating-kimwolf-ddos
Department of Justice
Canadian man arrested by international authorities, charged with administrating KimWolf DDoS botnet
ANCHORAGE, Alaska β A criminal complaint was unsealed in the District of Alaska today charging a Canadian man with operating the KimWolf Distributed Denial of Service (DDoS) Internet of Things (IoT) botnet. The U.S. complaint was unsealed following the defendantβsβ¦
π3β€1
BravoX ransomware group has listed The Salvation Army, marking the third time in less than a year the organization has been named by a ransomware group. It was previously listed by the Interlock and Chaos ransomware groups. BravoX claims to have stolen 110 GB of data across 4,500 directories and 59,000 files.
π1
Genesis ransomware group has listed five new victims:
- A. Roettgers
- Cedar Street Capital
- Green Resource
- Wentworth
- Cavalier Flooring Systems Inc.
The organizations span multiple sectors, including fuel retail, private investment, agricultural supply distribution, home remodeling, and flooring and tile contracting.
- A. Roettgers
- Cedar Street Capital
- Green Resource
- Wentworth
- Cavalier Flooring Systems Inc.
The organizations span multiple sectors, including fuel retail, private investment, agricultural supply distribution, home remodeling, and flooring and tile contracting.
Lapsus$ has listed INGKA Group (IKEA), claiming to have obtained approximately 180 GB of internal data. The group says the data includes global e-commerce architecture mapping, internal coworker platforms, supply chain logistics, cloud infrastructure, and AI/MLOps repositories.
π1
Akira ransomware group lists three new victims on its DLS: Oaks Park, Kennon Worldwide, and T/CCI Manufacturing.
The group claims it will soon publish 10 GB of data from Oaks Park, 30 GB from Kennon Worldwide, and 35 GB from T/CCI Manufacturing. Alleged data includes employee information, payment details, contracts, NDAs, client information, financials, and confidential files.
The group claims it will soon publish 10 GB of data from Oaks Park, 30 GB from Kennon Worldwide, and 35 GB from T/CCI Manufacturing. Alleged data includes employee information, payment details, contracts, NDAs, client information, financials, and confidential files.
π2