daily cyber × ai intelligence

← threat actors

threat actor

Kairos

1 story · 1 in the wild · July 5, 2026 – July 5, 2026

evidence: 1 observed

sectors

  • government 1 · Jul 5

techniques

  • extortion 1 · Jul 5

attack phases seen

  • Impact 1 · Jul 5

what we reported, newest first, grouped by story

July 5, 2026

  • A U.S. government entity paid ~$1M to "Kairos" in a pure data-extortion case. Ransom-ISAC reconstructed the negotiation from leaked chat logs and blockchain tracing; notably, no encryptor or locker binary has ever been linked to Kairos — just stolen data, deadlines, and an unverifiable deletion promise. The Hacker News · Jul 5 · observed · Threat Activity