SnowSoul

SnowSoul is a financially motivated threat actor active since at least early 2026, operating a low-ransom extortion scheme primarily targeting Chinese organizations. The actor sends extortion demands of around $2,000 USD, and when victims refuse to pay, leaks stolen data on hacker forums. Operations are tracked through numbered identifiers (e.g., SnowSoul ID-1265, ID-1270), suggesting a systematic, serial campaign.

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://dailydarkweb.net/snowsoul-attack-hits-multiple-chinese-organizations/
• https://dailydarkweb.net/guangdong-caiding-market-group-faces-data-breach-after-extortion/
• https://hacknotice.com/2026/03/16/hualun-new-materials-suffers-massive-data-breach-by-snowsoul/

Mənbə: MISP Galaxy, Malpedia.