Uptime Hamster: 15d 9h 5mDeploy: 13 Jul 2026 08:04Updated: 2026-07-14

Ido Cohen: New Ransomware Groups Added to DarkFeed Over the past few days, we added two new ransomware/extortion groups to the DarkFeed intelligence platform: SevyWare A newly launched RaaS operation claiming ties to former members of established ransomware groups. The operators are actively recruiting Initial Access Brokers and insiders while promoting an aggressive affiliate-focused model.

Fecha
21 Jun 2026
Actor
ido_cohen2
Tipo
Ransomware
Pais
Unknown
Sector
Media
Confianza
high
63
Prioridad analitica
Media

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

1IOCs
1TTPs
ido_cohen2Actor
UnknownPais
Executive Summary
Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.

Key Points

  • Tweet original en X
  • Perfil de @ido_cohen2

New Ransomware Groups Added to DarkFeed Over the past few days, we added two new ransomware/extortion groups to the DarkFeed intelligence platform: SevyWare A newly launched RaaS operation claiming ties to former members of established ransomware groups. The operators are actively recruiting Initial Access Brokers and insiders while promoting an aggressive affiliate-focused model.

Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.


New Ransomware Groups Added to DarkFeed Over the past few days, we added two new ransomware/extortion groups to the DarkFeed intelligence platform: SevyWare A newly launched RaaS operation claiming ties to former members of established ransomware groups. The operators are actively recruiting Initial Access Brokers and insiders while promoting an aggressive affiliate-focused model. Booba Project A new extortion group presenting itself as a "data decryption service" and claiming to provide decryptors following successful negotiations with victims. While neither group has published victims yet, both are actively building their presence and should be monitored closely. More than 25 new ransomware and cyber extortion groups have already been added to DarkFeed since the beginning of the year. Want to track emerging threat actors before they become mainstream? darkfeed.io/get-started/ #Ransomware #ThreatIntelligence #CyberSecurity #DarkFeed #CTI #ThreatActors #CyberThreats

Ido Cohen: New Ransomware Groups Added to DarkFeed Over the past few days, we added two new ransomware/extortion groups to the DarkFeed intelligence platform: SevyWare A newly launched RaaS operation claiming ties to former members of established ransomware groups. The operators are actively recruiting Initial Access Brokers and insiders while promoting an aggressive affiliate-focused model.


Referencias

Diamond Model

Adversary
ido_cohen2
Ver perfil →
Victim
Ido Cohen: New Ransomware Groups Added to DarkFeed Over the past few days, we added two new ransomware/extortion groups to the DarkFeed intelligence platform: SevyWare A newly launched RaaS operation claiming ties to former members of established ransomware groups. The operators are actively recruiting Initial Access Brokers and insiders while promoting an aggressive affiliate-focused model.
Capability
Ransomware
1 TTPs MITRE
Infrastructure
darkfeed.io

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
domain darkfeed.io observed in tweet VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor ido_cohen2 en el blog → Ver ido_cohen2 en IntelTracker → URL IntelTracker: nitter.net→ URL IntelTracker: x.com → Fuente OSINT: nitter.net→ Fuente OSINT: x.com → Buscar ido_cohen2 en APTTrail → Repositorio APTTrail → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes