Skip to content
Cybercrime Groups Roasted: A New Approach to Threat Awareness

Cybercrime Groups Roasted: A New Approach to Threat Awareness

First seen 5 Apr 2026, 13:27 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 6, 2026 at 13:12 UTC
  • •Industry leaders are calling for a shift away from glamorizing cybercriminals.
  • •The 'Dark Web Roast' blog critiques cybercriminal tactics with humor and mockery.
  • •CVE-2026-20045 is highlighted as a critical vulnerability under active exploitation.

Cybercrime crews are often portrayed as formidable entities, but industry leaders are advocating for a shift in narrative. Former CISA head Jen Easterly and Trellix VP John Fokker emphasize that these actors are merely individuals using computers for theft, not mythical figures. In response, Trellix launched the 'Dark Web Roast,' a blog that humorously critiques cybercriminals and their tactics. Recent posts highlight a ransomware gang's questionable practices and an exploit developer's undervaluation of a critical Cisco vulnerability (CVE-2026-20045). The initiative aims to demystify cybercriminals and reduce their glamorization. The LockBit infrastructure dismantling by the UK's NCA is also referenced as a significant law enforcement action against cybercrime. This approach combines humor with serious educational content to inform organizations about the realities of cyber threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 192d ago How this analysis works

Timeline

2026-01-21
CVE-2026-20045 published and added to CISA KEV
2026-01-22
First public PoC for CVE-2026-20045
Recent
Launch of the 'Dark Web Roast' blog by Trellix
Recent
Discussion of the LockBit infrastructure dismantling

More articles in this cluster (2)

Following this threat?

Track Hive, Velvet Tempest and Rhadamanthys in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed