Coinbasecartel

Reports

First seen

May 13

Last seen

Jun 12

Motivation

extortion, financial, financial extortion

Targeting

Sectors

technology ×10telecommunications ×1

Victim regions

United States ×7United Kingdom ×1Ireland ×1France ×1Argentina ×1

Top ATT&CK techniques

T1005 Data from Local System ×2T1078 Valid Accounts ×1T1567 Exfiltration Over Web Service ×1T1552.007 Unsecured Credentials: Container API ×1T1078.004 Valid Accounts: Cloud Accounts ×1T1195.001 Compromise Software Dependencies and Development Tools ×1T1567.002 Exfiltration Over Web Service: Exfiltration to Cloud Storage ×1

Indicators

domain ×34hash_sha256 ×7hash_md5 ×6ip_v4 ×6hash_sha1 ×2

Indicator values are available on Pro and via the API.

Recent reports

Medium

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Top ATT&CK techniques

Indicators

Recent reports

Coinbasecartel claims Demand.io victim on ransomware.live

Coinbasecartel publishes Cambridge Mobile Telematics as ransomware victim

Coinbasecartel publishes Demand.io as new ransomware victim

Coinbasecartel publishes Cambridge Mobile Telematic as ransomware victim

Coinbasecartel publishes Cambridge Mobile Telematics as ransomware victim

Coinbasecartel claims Siveco as victim on ransomware.live

Coinbasecartel claims Openmind Networks victim on ransomware.live

Coinbasecartel claims Pragmatic Solutions victim on ransomware.live

Grafana GitHub Breach Exposes Source Code via TanStack npm Supply Chain Attack

Grafana GitHub Token Breach Leads to Codebase Theft and Extortion Attempt

Coinbasecartel publishes Zywave as ransomware victim

Coinbasecartel publishes Grafana as ransomware victim

Coinbasecartel claims Buenos Aires Software victim