Baguette bandits strike again with ransomware and a side of mockery

Hellcat is an emerging ransomware-as-a-service group active since mid-2024 that has targeted government, education, energy, and telecom organizations using double-extortion tactics and publicly humiliating victims. Notable activity includes a claimed Schneider Electric breach (40GB stolen and subsequent leak of 75,000 email addresses), large-scale data leaks and sales (including claims affecting Tanzania and Jordan), and exploitation of a previously unknown Atlassian Jira vulnerability to gain access; the group also advertises root access and stolen datasets for sale.