Lamashtu is an emerging data extortion group that first surfaced in March 2026, rapidly establishing a presence with a unique operational model centered on comprehensive data exposure rather than traditional file encryption. The group's name is derived from Mesopotamian mythology, referring to a demonic entity. Lamashtu operates a centralized leak platform featuring structured and staged data disclosures, complemented by peer-to-peer (torrent-based) distribution mechanisms to broaden data dissemination. Their primary motivation is financial extortion, employing a dual-impact model that combines explicit ransom demands with the threat and execution of large-scale sensitive data exposure. This approach distinguishes them through a focus on sustained risk via continued accessibility and potential third-party exploitation of compromised data, marking a transition towards a more mature extortion methodology without a demonstrated reliance on specialized exploits.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker