The Skiddies are Playing Dress-up

This report describes a trend of low-skilled attackers ("script kiddies") sending ransom demands that impersonate established hacking groups (e.g., Armada Collective) to extort organizations with threats of DDoS; often the impersonators do not follow through, relying instead on fear to collect payments. It recommends closely examining ransom messages, claimed identities, payment methods, typical targets, and surrounding events before assessing risk or considering payment.