Uptime Hamster: 15d 9h 5mDeploy: 13 Jul 2026 08:04Updated: 2026-07-14

Ido Cohen: Stormous is back with increased activity. Recent victims have had their public websites defaced with a ransomware message displayed directly on the homepage—a pressure tactic sometimes used by ransomware groups to increase urgency and force negotiations. DarkFeed makes it easy to compare a ransomware group's leak site with the victim's public website in one place, helping analysts quickly identify attacks like these.

Fecha
25 Jun 2026
Actor
ido_cohen2
Tipo
Ransomware
Pais
United States
Sector
Media
Confianza
high
63
Prioridad analitica
Media

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

1IOCs
1TTPs
ido_cohen2Actor
United StatesPais
Executive Summary
Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.

Key Points

  • Tweet original en X
  • Perfil de @ido_cohen2

Stormous is back with increased activity. Recent victims have had their public websites defaced with a ransomware message displayed directly on the homepage—a pressure tactic sometimes used by ransomware groups to increase urgency and force negotiations. DarkFeed makes it easy to compare a ransomware group's leak site with the victim's public website in one place, helping analysts quickly identify attacks like these.

Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.


Stormous is back with increased activity. Recent victims have had their public websites defaced with a ransomware message displayed directly on the homepage—a pressure tactic sometimes used by ransomware groups to increase urgency and force negotiations. DarkFeed makes it easy to compare a ransomware group's leak site with the victim's public website in one place, helping analysts quickly identify attacks like these. Try DarkFeed: darkfeed.io/get-started/ #Ransomware #Stormous #Defacement #CyberSecurity #ThreatIntel #CTI

Ido Cohen: Stormous is back with increased activity. Recent victims have had their public websites defaced with a ransomware message displayed directly on the homepage—a pressure tactic sometimes used by ransomware groups to increase urgency and force negotiations. DarkFeed makes it easy to compare a ransomware group's leak site with the victim's public website in one place, helping analysts quickly identify attacks like these.


Referencias

Diamond Model

Adversary
ido_cohen2
Ver perfil →
Victim
Ido Cohen: Stormous is back with increased activity. Recent victims have had their public websites defaced with a ransomware message displayed directly on the homepage—a pressure tactic sometimes used by ransomware groups to increase urgency and force negotiations. DarkFeed makes it easy to compare a ransomware group's leak site with the victim's public website in one place, helping analysts quickly identify attacks like these.
United States
Capability
Ransomware
1 TTPs MITRE
Infrastructure
darkfeed.io

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
domain darkfeed.io observed in tweet VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor ido_cohen2 en el blog → Ver ido_cohen2 en IntelTracker → URL IntelTracker: nitter.net→ URL IntelTracker: x.com → Fuente OSINT: nitter.net→ Fuente OSINT: x.com → Buscar ido_cohen2 en APTTrail → Repositorio APTTrail → Mas incidentes en United States → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes