{
  "id": 3867812,
  "title": "CRPx0 hacking service for dummies claims victim count more than quintupled",
  "url": "https://urgent.news/2026/08/27/crpx0-hacking-service-for-dummies-claims-victim-count-more-than-3867812",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-27T21:24:27.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/cyber-crime/2026/08/27/crpx0-hacking-service-for-dummies-claims-victim-count-more-than-quintupled/5293097"
  },
  "original_language": "en",
  "account": "CRPx0, a cybercrime group, has experienced a significant increase in victims, rising from fewer than ten in June to forty-eight organizations by the time of publication. This ransomware and crypto-theft business, which emerged as a scam service earlier in the summer, offers a variety of hacking services, including complete database extraction, network compromise, and persistent access. The group provides a hacking platform that allows affiliates to keep 100% of their profits, along with a white-label ransomware-as-a-service service for a $10,000 one-time fee. Payment for extortion is requested in Monero, and the group prefers not to target organizations in the Commonwealth of Independent States. CRPx0's ransomware delivery employs two phishing lures - a fake Windows Update and a fake Google reCAPTCHA - to trick victims into executing a PowerShell command, ultimately deploying Python-based ransomware. The group's advanced control center can be operated by non-technical individuals, stealing valuable files, credentials, and wallet recovery keys while watching stolen cryptocurrency wallet addresses flow in. Defenders should prioritize five actions to protect against CRPx0 and similar attacks: removing the Run dialog for standard users, restricting Terminal via MDM for non-technical staff, alerting on PowerShell, curl, or long base64 strings in the RunMRU, and blocking adversary network indicators.",
  "summary": "It's 'built to be operated by a human with no technical background'",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "CRPx0 hacking service for dummies claims victim count more than quintupled",
        "url": "https://urgent.news/2026/08/27/crpx0-hacking-service-for-dummies-claims-victim-count-more-than",
        "published": "2026-08-27T21:24:27.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}