Coinbase Cartel is a cybercriminal group that emerged in September 2025, distinguishing itself from traditional ransomware actors by focusing exclusively on data exfiltration and extortion rather than employing encryption. The group operates with a business-like professionalism, utilizing staged data leaks, evidence packages for victims, and even promoting partnership programs. Assessed to be an offshoot or composed of affiliates from the Scattered LAPSUS$ Hunters ecosystem, which includes members of ShinyHunters, Scattered Spider, and Lapsus$, the group's primary motivation is financial gain through pure extortion via stolen data. It quickly rose to become one of the top ten most active extortion groups globally. The name 'Coinbase Cartel' does not indicate any affiliation with the legitimate cryptocurrency exchange Coinbase.

Actores similares

coinbasecartelransomware · 177coinbase-cartelactor · 4ransomcartelransomware · 2cartelactor · 1