Skip to content

CyberSIXT Search

Threat actor · coverage timeline

Crimson Collective

7 articles from 6 outlets between 2 Oct 2025 and 7 Jan. First reported by Security Affairs. The busiest day was Wed 8 Oct 2025, with 2 articles.

Articles: 7; all time · from 6 outlets
Days with coverage: 6; of 98 days · all time
Busiest day · all time: 2; articles on Wed 8 Oct 2025
Last 7 days: 0a day; vs 0 a day · previous 7 days
First report: 2 Oct 2025; Security Affairs
CVEs named: 0; in these articles

Coverage over time

7 articles · 2 Oct 2025 – 7 Jan

2 Oct 2025First report2 Oct 2025 · Security Affairs

Show as table

Crimson Collective: articles per day
Day (UTC)	Articles	Outlets
Thu 2 Oct 2025	1	Security Affairs 1
Tue 7 Oct 2025	1	GBHackers 1
Wed 8 Oct 2025	2	GBHackers 1, Dark Reading 1
Thu 9 Oct 2025	1	SecurityOnline 1
Fri 10 Oct 2025	1	Unit 42 1
Wed 7 Jan	1	Malwarebytes 1

Articles

7 articles

Wed 7 Jan1 article

13:00
One million customers on alert as extortion group claims massive Brightspeed data haulMalwarebytes

Fri 10 Oct 2025 20251 article

21:35
The Golden Scale: Bling Libra and the Evolving Extortion EconomyUnit 42

Thu 9 Oct 2025 20251 article

01:50
Crimson Collective APT Uses Leaked IAM Keys to Hijack AWS Accounts for Data TheftSecurityOnline

Wed 8 Oct 2025 20252 articles

21:30
Red Hat Hackers Team Up With Scattered Lapsus$ HuntersDark Reading
06:45
Crimson Collective Exploits AWS Services to Steal Sensitive DataGBHackers

Tue 7 Oct 2025 20251 article

11:35
Red Hat Breach Impacts 5,000+ High-Value Enterprise Customers, Data at RiskGBHackers

Thu 2 Oct 2025 20251 article

11:30
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositoriesSecurity Affairs · first report