SYMBOLCOMMON_NAMEaka. SYNONYMS

Lamashtu  (Back to overview)


Lamashtu is a financially motivated data-theft and extortion group that emerged in mid-April 2026, operating a Tor-hosted leak site (Lamashtu[.]Blog) with countdown timers, structured Breach Impact Reports, and proof-of-life thumbnails to pressure victims. The group has claimed 17+ victims across France, Romania, Thailand, Malaysia, Egypt, and the UAE within its first weeks of activity, targeting energy, pharmaceutical, retail, hospitality, and film sectors, with confirmed exfiltration totaling 760+ GB.


Associated Families

There are currently no families associated with this actor.


References
2026-04-27Red PiranhaRed Piranha
Weekly Detected Threats - April 21 - April 27 2026
Lamashtu

Credits: MISP Project