LamashtuLamashtu

Profile

Lamashtu is a financially motivated data-theft and extortion group that emerged in mid-April 2026, operating a Tor-hosted leak site (Lamashtu[.]Blog) with countdown timers, structured Breach Impact Reports, and proof-of-life thumbnails to pressure victims. The group has claimed 17+ victims across France, Romania, Thailand, Malaysia, Egypt, and the UAE within its first weeks of activity, targeting energy, pharmaceutical, retail, hospitality, and film sectors, with confirmed exfiltration totaling 760+ GB.

References

  1. https://redpiranha.net/news/threat-intelligence-report-april-21-april-27-2026

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
RansomHouse
Group
LAPSUS$
Actor
Bahamut
Actor
Kairos
Actor
Larva-208
Actor
Blacktail
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.