Ransomware Group Turns to Facebook Ads
Summary: On the evening of Monday, Nov. 9, an ad campaign apparently placed by the Ragnar Locker Team appeared on Facebook pressuring Italian beverage vendor Campari Group, which had acknowledged on Nov. 3 that its systems were sidelined by a malware attack, to negotiate an extortion payment by 6 p.m. EST on Nov. 10. The ads were paid for through the hacked Facebook account of Chicago deejay Chris Hodson, who said the attackers budgeted $500 for the campaign, which reached roughly 7,150 users and generated 770 clicks at 21 cents per result before Facebook detected the ads as fraudulent.
What you should know: A ransomware crew turned a stolen Facebook login into a public extortion channel for $35 in billed ad spend, reaching thousands of users before the platform caught on - and Emsisoft's Fabian Wosar says groups have also begun outsourcing pressure calls to Indian call centers.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026