Skip to content
Luna Moth Ransomware Group's Operations Exposed in Leaked Files

Luna Moth Ransomware Group's Operations Exposed in Leaked Files

First seen 12 Oct 2026, 16:34 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 18:31 UTC
  • •Leaked files reveal Luna Moth's structured cyber extortion tactics.
  • •Attackers pose as IT support to manipulate victims into granting access.
  • •The group denies any breach, calling the leaks 'fake'.

Leaked documents from the Luna Moth ransomware group, also known as Silent Ransom Group, reveal their structured approach to cyber extortion. The files, released on an anonymous onion site, detail how attackers manipulate victims into providing remote access to their systems. Researchers from Check Point analyzed these documents, which include scripts for social engineering tactics and coordination between attackers. The group operates by posing as IT support to gain trust and access to networks. Despite the group's denial of any breach, the leaks indicate a sophisticated operation targeting individuals and organizations for financial gain. The incident highlights the need for organizations to implement stronger defenses against social engineering attacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-01
Luna Moth Files leaked
Internal files and chat logs of the Luna Moth group appeared on an onion site, detailing their operations.
Databreaches
2026-10-09
Check Point analysis published
Check Point researchers released an analysis of the leaked documents, revealing the group's operational tactics.
Infosecurity-Magazine
2026-10-11
Luna Moth denies leaks
The Silent Ransom Group claimed the leaked files were fake and denied any breach or leak.
Databreaches

More articles in this cluster (2)

Following this threat?

Track Chatty Spider UNC3753 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What methods does Luna Moth use to attack?
Luna Moth uses social engineering tactics, posing as IT support to gain remote access to victims' systems.
How did the Luna Moth Files leak?
The files were released on an anonymous onion site, with no clear indication of who was responsible for the leak.
What should organizations do to protect against these tactics?
Organizations should enhance their training on social engineering and implement strict access controls to prevent unauthorized access.