Threat actor

RansomHouse

In 7 briefs, most recently 10 May 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. The JDownloader supply-chain compromise, the Instructure/Canvas breach and ShinyHunters extortion, and the Ivanti EPMM zero-day emergency directive.
  2. The Instructure/Canvas breach and ShinyHunters attacks, the Trellix source code theft by RansomHouse, and a Linux kernel LPE dubbed Dirty Frag.
  3. ShinyHunters breach of Instructure's Canvas disrupts colleges; RansomHouse claims Trellix breach; Daemon Tools supply chain attack contained.
  4. PornHub user data stolen for extortion, 54 indicted over Ploutus ATM jackpotting, and a Cisco zero-day with no patch yet.
  5. PornHub data breach with extortion, Infy (Prince of Persia) APT resurfaces against Sweden, and DOJ indicts 54 in Ploutus ATM jackpotting scheme.
  6. PDVSA cyberattack disrupts Venezuelan oil exports, SoundCloud breach hits 20% of users, and Urban VPN extension harvests AI chatbot conversations.
  7. SoundCloud breach and VPN disruption, Askul ransomware exposing 740,000 records, and ShinyHunters extorting PornHub over Mixpanel-linked data theft.