Pink, also known as CL-CRI-1147 by Palo Alto Unit 42, is a data extortion group that made its public debut on May 31, 2026, with the launch of its dedicated Data Leak Site. The group's core motivation is financial gain through data extortion, a goal achieved by primarily using social engineering for initial access. Pink distinguishes itself by employing vishing, where members impersonate internal IT support to deceive targets into revealing credentials and authentication details on phishing sites. This group is believed to be affiliated with "The Com," an international cybercriminal network, and is assessed to be a rebrand of Redact, which itself was a rebrand of BlackFile, indicating a pattern of evolution within this broader subculture.

Aliases del actor

CL-CRI-1147Deep PandaWebMastersApt19KungFu KittensGroup 13Sh3llCr3wPinkPantherWinnti GroupFlowerLadyPOISON IVYPlugXentre otrosAPT9otrosSaaiwc GroupASEANotros países asiáticosel malwareBlackGuardcherryspyhatvibe

Actores similares

apt-equationgroupactor · 1apt-group5actor · 1winnti-groupactor · 1Lazarus Groupthreat-actor · 1Winnti Groupthreat-actor · 1Turla Groupapt · 0Silence groupapt · 0poisonous-pandaactor · 1Deep Pandathreat-actor · 1Poisonous Pandaapt · 0