{
  "schema_version": 3,
  "report_contract_version": 5,
  "report_plan": {
    "control_implications": [
      {
        "control_id": "vulnerability_management",
        "evidence_excerpt": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…",
        "evidence_origin": "content",
        "focus": "Atlassian product families",
        "priority": "high",
        "source_ids": [
          1
        ]
      },
      {
        "control_id": "data_protection",
        "evidence_excerpt": "ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data…",
        "evidence_origin": "summary",
        "focus": "some personal data",
        "priority": "high",
        "source_ids": [
          4
        ]
      },
      {
        "control_id": "monitoring",
        "evidence_excerpt": "Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe…",
        "evidence_origin": "summary",
        "focus": "phishkit targeting banking",
        "priority": "medium",
        "source_ids": [
          5
        ]
      },
      {
        "control_id": "third_party_risk",
        "evidence_excerpt": "The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said…",
        "evidence_origin": "summary",
        "focus": "Tensorlake applications",
        "priority": "high",
        "source_ids": [
          11
        ]
      },
      {
        "control_id": "data_protection",
        "evidence_excerpt": "Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to…",
        "evidence_origin": "summary",
        "focus": "Mozilla Firefox extensions",
        "priority": "medium",
        "source_ids": [
          7
        ]
      }
    ],
    "executive_brief": {
      "decision_frame": "separate",
      "source_ids": [
        1,
        4,
        11
      ]
    },
    "industry_impacts": [],
    "regulatory_changes": []
  },
  "generated_at": "2026-10-08T13:15:08.893623Z",
  "feed_url": "https://ricomanifesto.github.io/SentryDigest/feed.xml",
  "feed_home_url": "https://ricomanifesto.github.io/SentryDigest/",
  "digest_issue_date": "2026-10-08",
  "digest_issue_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/",
  "requested_model": "openrouter/nvidia/nemotron-3-ultra-550b-a55b:free",
  "resolved_model": "nvidia/nemotron-3-ultra-550b-a55b:free",
  "sources": [
    {
      "title": "Hackers exploit critical Atlassian flaw after public PoC release",
      "url": "https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-4e5e4a2f6d27",
      "cves": [
        "CVE-2026-21589"
      ],
      "snippet": "Hackers exploit critical Atlassian flaw after public PoC release A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication… A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…",
          "text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…",
          "text": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "Microsoft Teams to get support for third-party deepfake detection tools",
      "url": "https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-8807a125f475",
      "cves": [],
      "snippet": "Microsoft Teams to get support for third-party deepfake detection tools Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings… Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings…",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings…",
          "text": "Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings…",
          "text": "Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "Writing the Next Chapter",
      "url": "https://www.darkreading.com/cybersecurity-operations/writing-next-chapter",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-fe74064648e5",
      "cves": [],
      "snippet": "Writing the Next Chapter Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share. Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share.",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share.",
          "text": "Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share."
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share.",
          "text": "Dark Reading is about to begin a new decade in its storied history, and we have some breaking news of our own to share."
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "ASOS links data breach to social engineering attack, credential theft",
      "url": "https://www.bleepingcomputer.com/news/security/asos-links-data-breach-to-social-engineering-attack-credential-theft/",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-e7ebdbc179da",
      "cves": [],
      "snippet": "ASOS links data breach to social engineering attack, credential theft ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data… ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data…",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data…",
          "text": "ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data…",
          "text": "ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that hackers accessed some personal data…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia",
      "url": "https://thehackernews.com/2026/10/wazza-phishkit-targets-banking.html",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-e8a1c9ded2dd",
      "cves": [],
      "snippet": "Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe… Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls in",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe…",
          "text": "Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe…",
          "text": "Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself. ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "Owner of Empire cybercrime market gets 40 years in prison",
      "url": "https://www.bleepingcomputer.com/news/security/owner-of-empire-cybercrime-market-gets-40-years-in-prison/",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-c19730d30518",
      "cves": [],
      "snippet": "Owner of Empire cybercrime market gets 40 years in prison The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020… The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020…",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020…",
          "text": "The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020…",
          "text": "The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases",
      "url": "https://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.html",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-0a0a43d53f75",
      "cves": [],
      "snippet": "16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to… Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet por",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to…",
          "text": "Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to…",
          "text": "Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. \"The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks",
      "url": "https://thehackernews.com/2026/10/us-offers-up-to-10-million-for-tips-on.html",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-6ea1ec6e49a1",
      "cves": [],
      "snippet": "U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice… The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks k",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice…",
          "text": "The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice…",
          "text": "The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data",
      "url": "https://thehackernews.com/2026/10/monstercloud-owner-accused-of-billing.html",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-9d4247f226b7",
      "cves": [],
      "snippet": "MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data. Zohar Pinhasi (aka Zack Silver and Zack Green) has been charged with two counts of wire fraud and one count of wire… The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptor",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data. Zohar Pinhasi (aka Zack Silver and Zack Green) has been charged with two counts of wire fraud and one count of wire…",
          "text": "The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data. Zohar Pinhasi (aka Zack Silver and Zack Green) has been charged with two counts of wire fraud and one count of wire…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data. Zohar Pinhasi (aka Zack Silver and Zack Green) has been charged with two counts of wire fraud and one count of wire…",
          "text": "The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to recover their data. Zohar Pinhasi (aka Zack Silver and Zack Green) has been charged with two counts of wire fraud and one count of wire…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland",
      "url": "https://www.bleepingcomputer.com/news/security/samsung-galaxy-s26-hacked-three-more-times-at-pwn2own-ireland/",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-958c66cc09d0",
      "cves": [],
      "snippet": "Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland ​​​On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities… ​​​On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities…",
      "article_evidence": [],
      "effective_date_evidence": null
    },
    {
      "title": "Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm",
      "url": "https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-a947937fc68c",
      "cves": [],
      "snippet": "Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said… The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said…",
          "text": "The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said…",
          "text": "The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said…"
        }
      ],
      "effective_date_evidence": null
    },
    {
      "title": "Ransomware recovery CEO charged over secret ransom payments",
      "url": "https://www.bleepingcomputer.com/news/security/ransomware-recovery-ceo-charged-over-secret-ransom-payments/",
      "digest_url": "https://ricomanifesto.github.io/SentryDigest/archive/2026-10-08/#reporting-8112fe6fe7db",
      "cves": [],
      "snippet": "Ransomware recovery CEO charged over secret ransom payments The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data… The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data…",
      "article_evidence": [
        {
          "extraction_version": 1,
          "origin": "summary",
          "raw_text": "The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data…",
          "text": "The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data…"
        },
        {
          "extraction_version": 1,
          "origin": "content",
          "raw_text": "The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data…",
          "text": "The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data…"
        }
      ],
      "effective_date_evidence": null
    }
  ]
}