Operation Riptide

Campaign
7 incidents First seen 2026-06-12 Last seen 2026-08-05
Overview

Operation Riptide appears in 5 incidents tracked by Vulpsec CTI; the most recent is: Extradited Ukrainian Man Admits Conti Ransomware Attacks. Targeted sectors: government, finance, legal.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 170
Activity by month (incidents)
2026-062026-08
Sectors targeted
finance · 3government · 3education · 1energy · 1health · 1legal · 1manufacturing · 1retail · 1technology · 1
Countries targeted
US · 6ES · 3GB · 3IT · 3AT · 2CA · 2CH · 2DE · 2DK · 2FR · 2IE · 2NL · 2
Origin
CA · 2CN · 2RU · 2DE · 1ES · 1FI · 1
Kinds of incident
Law Enforcement · 5Phishing & Social Engineering · 2DDoS & Disruption · 1Data Breach · 1Ransomware & Extortion · 1
Techniques seen in incidents
Extortion · 4Phishing · 4Ransomware · 2Social Engineering · 2T1059.007 - JavaScript · 2Botnet · 1Data Breach · 1Ddos · 1Espionage · 1Impersonate · 1T1059.001 - PowerShell · 1T1566 - Phishing · 1T1588.001 - Malware · 1T1590.005 - IP Addresses · 1
Related malware
ALPHV · 1Amadey · 1Azorult · 1BlackCat · 1Bumblebee · 1Conti · 1Dridex · 1FakeUpdates · 1
Related actors
Indrik Spider · 1Mustard Tempest · 1NoName057(16) · 1Scattered Spider · 1
Incident timeline
2026-08-05
Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millions
Data Breaches
2026-07-07
CyberScoop HackRead
2026-07-02
Security Affairs
2026-06-24
Europol Disrupts SocGholish Servers, Cleans Malicious TDS Threat
HackRead BleepingComputer Security Affairs Have I Been Pwned Dark Reading CyberScoop Bit Life Media The Hacker News
2026-06-14
FBI disrupts massive AI-powered phishing service using a million URLs
BleepingComputer
2026-06-13
HackRead HackRead
2026-06-12
Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing
The Hacker News