Operation Saffron

Campaign
2 incidents First seen 2026-05-22 Last seen 2026-07-14
Overview

Operation Saffron appears in 2 incidents tracked by Vulpsec CTI; the most recent is: VPN and Cryptor Seller Sanctioned for Ransomware Losses.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 130
Activity by month (incidents)
2026-052026-07
Countries targeted
CH · 2DE · 2ES · 2FR · 2GB · 2LU · 2NL · 2RO · 2AL · 1AT · 1BE · 1BG · 1
Kinds of incident
Law Enforcement · 2Ransomware & Extortion · 2
Techniques seen in incidents
Ransomware · 2Ddos · 1Phishing · 1
Related malware
Avaddon · 1
Incident timeline
2026-07-14
Security Affairs BleepingComputer
2026-05-22
HackRead Bit Life Media