n0n extortion operator exposed AI-aided attack files on open server
SOCRadar says every examined break-in used weak or stolen credentials, not a software vulnerability.
74
- Mentions · 7d0
- Mentions · 30d5
- All mentions6
- First seenSep 24, 2026
- Last mentioned12d ago
Timeline
6 articles · newest firstBlue Initiative launches maritime-only vulnerability database for shipping IT and OT
The database will publish only vulnerabilities for which a patch is available, and no n0n leak-site victims have confirmed incidents.
18
n0n ransomware reaches 40+ shipping firms via maritime IT supplier
Victims were listed on October 12; the claimed ransom total is $1.2 billion, and most data was leaked.
78
Shipping firms and ports caught in mass cyber extortion claim
Extortion group n0n claims data from 38 shipping and port firms and demands ransoms by October 19.
64
n0n Group Puts Dozens of Global Ports and Shipping on Its Leak Site
Extortion group n0n listed 38 global ports, terminals, and shipping firms on its leak site.
76
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
New ransomware gang n0n threatens to destroy backups and has listed more than a dozen victims.
72
Appears with
- SOCRadarorganization · 2
- Transcomvictim · 1
- OpenCodeproduct · 1
- CyberXTronorganization · 1
- BNCTvictim · 1
- Claudeai model · 1
- n0nmalware · 1
- Portonavevictim · 1
- Qwenai model · 1
- Eurogate Tangervictim · 1
- GPT-5.xai model · 1
- CyberLogitecvictim · 1
- TS Linesvictim · 1
- PayPalorganization · 1
- DeepSeekai model · 1
- Mistralai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.