ExtortionData ExfiltrationRDPCobalt Strike
World Leaks
World Leaks: RDP Access Leads to Custom Exfiltration and Personalized Extortion
Two phase intrusion: RDP brute force, privacy.sexy defense kill, Cobalt Strike, SoftPerfect Network Scanner, custom Rust exfiltration tool across 6,900+ Cloudflare IPs, personalized ransom notes addressed by name to every employee. Full negotiation chats included.
2026-04-13