Uptime Hamster: 15d 7h 49mDeploy: 13 Jul 2026 08:04Updated: 2026-07-05

Ido Cohen: The attackers never rest... and neither do we. Meet RedAct, a newly tracked ransomware group. The group has already published 2 victims and states that it is driven purely by financial gain—not politics or hacktivism. According to its public message, organizations that refuse to negotiate or fail to meet ransom demands should expect their stolen data to be published. Another emerging threat worth keeping on your radar.

Fecha
28 Jun 2026
Actor
ido_cohen2
Tipo
Ransomware
Pais
Unknown
Sector
Media
Confianza
high
63
Prioridad analitica
Media

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

1IOCs
1TTPs
ido_cohen2Actor
UnknownPais
Executive Summary
Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.

Key Points

  • Tweet original en X
  • Perfil de @ido_cohen2

The attackers never rest... and neither do we. Meet RedAct, a newly tracked ransomware group. The group has already published 2 victims and states that it is driven purely by financial gain—not politics or hacktivism. According to its public message, organizations that refuse to negotiate or fail to meet ransom demands should expect their stolen data to be published. Another emerging threat worth keeping on your radar.

Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.


The attackers never rest... and neither do we. Meet RedAct, a newly tracked ransomware group. The group has already published 2 victims and states that it is driven purely by financial gain—not politics or hacktivism. According to its public message, organizations that refuse to negotiate or fail to meet ransom demands should expect their stolen data to be published. Another emerging threat worth keeping on your radar. Track new ransomware groups as they emerge: darkfeed.io/get-started/ #CyberSecurity #Ransomware #ThreatIntelligence #RedAct #CTI

Ido Cohen: The attackers never rest... and neither do we. Meet RedAct, a newly tracked ransomware group. The group has already published 2 victims and states that it is driven purely by financial gain—not politics or hacktivism. According to its public message, organizations that refuse to negotiate or fail to meet ransom demands should expect their stolen data to be published. Another emerging threat worth keeping on your radar.


Referencias

Diamond Model

Adversary
ido_cohen2
Ver perfil →
Victim
Ido Cohen: The attackers never rest... and neither do we. Meet RedAct, a newly tracked ransomware group. The group has already published 2 victims and states that it is driven purely by financial gain—not politics or hacktivism. According to its public message, organizations that refuse to negotiate or fail to meet ransom demands should expect their stolen data to be published. Another emerging threat worth keeping on your radar.
Capability
Ransomware
1 TTPs MITRE
Infrastructure
darkfeed.io

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
domain darkfeed.io observed in tweet VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor ido_cohen2 en el blog → Ver ido_cohen2 en IntelTracker → URL IntelTracker: nitter.net→ URL IntelTracker: x.com → Fuente OSINT: nitter.net→ Fuente OSINT: x.com → Buscar ido_cohen2 en APTTrail → Repositorio APTTrail → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes