logo

Extortion crew threatened to inform Edward Snowden (?!) if victim didn't pay up

ID: 4ad6b661-c632-5e55-911d-059e98a0bf2a

STIX ID: report--4ad6b661-c632-5e55-911d-059e98a0bf2a

Feed Name: The Register (Security)

Threat Score
55/100

Date Published: 2025-03-18

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

Ox Thief, an extortion crew identified by Fortra analysts, claims to have stolen 47 GB of sensitive files from Broker Educational Sales & Training (BEST) and is using threats of public disclosure, legal liability, and media/regulator escalation (including naming journalists and Edward Snowden) to force ransom payments; the group's claims are unverified and may intersect with Medusa ransomware-related activity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.