Skip to content
UnclassifiedIdeologyAdvanced sophistication

LeakNet

LeakNet is a threat actor group with an ideological motive, tracked by Brandefense. It uses 14 MITRE ATT&CK techniques.

Techniques
14
Exploited CVEs
No CVE data
First seen
Aug 18, 2025
Last seen
Jul 22, 2026
Record updated

About LeakNet.

LeakNet is a ransomware and data-extortion operation active since at least November 2024. Confirmed incident reporting describes ClickFix-style social engineering, a Deno-based in-memory loader, Java DLL side-loading, remote execution with PsExec, staging to cloud storage, data theft, and ransomware deployment.

Last updated Jul 28, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.