Muddled Libra: Why Are We So Obsessed With You?
Summary: Unit 42 examines why Muddled Libra, a social-engineering group that recently hit government, retail, insurance and aviation organizations, draws more media attention than other RaaS affiliates. In Unit 42's 2025 cases involving the group, 50% led to DragonForce ransomware deployment and data exfiltration, and the group's consistent playbook, distinctive vishing and English-language fluency make it easier to identify across cases.
Bottom line: Half of Unit 42's 2025 cases tied to this group ended in DragonForce ransomware and stolen data, and its English fluency lets it pick targets inside a victim environment - while no control can stop a malicious call from reaching your help desk.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026