U.S. Government Agency Paid $1M to Data Extortion Group Kairos
2026-07-05T02:51:44Z•801057f5497c53a9a0ef243e120c032a9fe7efb596ee5daed0a5d1bb4f7654d2
AI-driven-attackCISA-KEVDKIMDMARCFortiBleedFortiGateINC-RansomKairosLLMLynxMicrosoft-SharePointNetNutPegasusSPFTeamPCPcloud-credentialscredential-theftdata-extortiondeveloper-tools-compromiseemail-securityransomwareresidential-proxyshadow-AIspywaresupply-chain
What happened
Collection of high-impact cybersecurity stories: a U.S. government agency paid $1M to the data-extortion group Kairos; the FBI issued a FLASH on TeamPCP poisoning trusted developer/security tools to harvest cloud credentials, propagate malware via updates, and extort victims; Sysdig documented JADEPUFFER, an end-to-end AI/LLM‑driven ransomware operation; the Vercel breach highlighted shadow AI supply‑chain risk and a $2M extortion; Google/FBI coordinated disruption of the NetNut malicious residential proxy network; Citizen Lab found Pegasus spyware used against an MEP investigating Pegasus; SO
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 801057f5497c53a9a0ef243e120c032a9fe7efb596ee5daed0a5d1bb4f7654d2
- Enrichment time
- 2026-07-05T02:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.