CyberSIXT Search
Threat actor

Crimson Collective

Tracked by CyberSIXT since 2 Oct 2025

Articles · all time
7
Articles · last 30 days
0
CVEs exploited · attributed · all time
0
Research reports · all time
0

7 articles from 6 outlets since 2 Oct 2025; the latest 291 days ago.

Crimson Collective: coverage over time7 articles from 6 outlets. First report 2 Oct 2025 by Security Affairs. Busiest week: 5 articles, week of 6 Oct 2025. 0 in the last 7 days. Crimson Collective: coverage over time7 articles from 6 outlets. First report 2 Oct 2025 by Security Affairs. Busiest week: 5 articles, week of 6 Oct 2025. 0 in the last 7 days.
  • Article
Show as table
Crimson Collective: articles
Published (UTC)OutletHeadline
Wed 7 Jan · 13:00 UTCMalwarebytesOne million customers on alert as extortion group claims massive Brightspeed data haul
Fri 10 Oct 2025 · 21:35 UTCUnit 42The Golden Scale: Bling Libra and the Evolving Extortion Economy
Thu 9 Oct 2025 · 01:50 UTCSecurityOnlineCrimson Collective APT Uses Leaked IAM Keys to Hijack AWS Accounts for Data Theft
Wed 8 Oct 2025 · 21:30 UTCDark ReadingRed Hat Hackers Team Up With Scattered Lapsus$ Hunters
Wed 8 Oct 2025 · 06:45 UTCGBHackersCrimson Collective Exploits AWS Services to Steal Sensitive Data
Tue 7 Oct 2025 · 11:35 UTCGBHackersRed Hat Breach Impacts 5,000+ High-Value Enterprise Customers, Data at Risk
Thu 2 Oct 2025 · 11:30 UTCSecurity AffairsCybercrime group claims to have breached Red Hat ‘s private GitHub repositories

Who reported 6 outlets

  • GBHackers2
  • Security Affairs1
  • Dark Reading1
  • SecurityOnline1
  • Unit 421
  • Malwarebytes1
See the full timeline

Names and sources

Crimson Collective
Named by CyberSIXT coverage
Crimson Collective
Named by Malpedia · crimson_collective
Crimson Collective
Named by MISP Galaxy · 8ab83a2c-e5c6-4963-808f-83395f9610ea
Crim son Collective
Named by CyberSIXT coverage
8ab83a2c-e5c6-4963-808f-83395f9610ea
Named by CyberSIXT coverage

Attributed facts

sector
Technology (MISP Galaxy · 8ab83a2c-e5c6-4963-808f-83395f9610ea)
Include passing mentions (2)

Coverage

7 articles, all timeFull timeline RSS feed
  1. One million customers on alert as extortion group claims massive Brightspeed data haulMalwarebytes
  2. The Golden Scale: Bling Libra and the Evolving Extortion EconomyUnit 42
  3. Crimson Collective APT Uses Leaked IAM Keys to Hijack AWS Accounts for Data TheftSecurityOnline
  4. Red Hat Hackers Team Up With Scattered Lapsus$ HuntersDark Reading
  5. Crimson Collective Exploits AWS Services to Steal Sensitive DataGBHackers
  6. Red Hat Breach Impacts 5,000+ High-Value Enterprise Customers, Data at RiskGBHackers
  7. Cybercrime group claims to have breached Red Hat ‘s private GitHub repositoriesSecurity Affairs · first in our coverage

Related actors

Learn more

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device