PLEAD

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: elf.plead

Threat Analysis

PLEAD is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning PLEAD

Security News This Week: LastPass Users Had Their Data Stolen—Again

Wired Security· Jun 27, 2026

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Krebs on Security· Jun 23, 2026

Scattered Spider members plead guilty to hacking Transport for London

BleepingComputer· Jun 23, 2026

Two Scattered Spider members plead guilty over cyberattack that crippled London transit

The Record· Jun 23, 2026

Scattered Spider Teens Convicted of TfL Cyber-Attack

Infosecurity Magazine· Jun 23, 2026

Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges

SecurityWeek· Jun 15, 2026

Ukrainian national pleads guilty to role in Conti ransomware operation

BleepingComputer· Jun 12, 2026

Sextortionist sentenced to 33 years for targeting 145 children

BleepingComputer· May 28, 2026

External References

→http://blog.jpcert.or.jp/2018/03/malware-tscooki-7aa0.html

→http://www.freebuf.com/column/159865.html

→https://blog.jpcert.or.jp/2018/06/plead-downloader-used-by-blacktech.html

→https://blog.trendmicro.com/trendlabs-security-intelligence/following-trail-blacktech-cyber-espionage-campaigns/

→https://blog.trendmicro.com/trendlabs-security-intelligence/kivars-with-venom-targeted-attacks-upgrade-with-64-bit-support/

Quick Facts

TypeAPT / Threat Group

Aliases6

Also Known As

GOODTIMESwin.pleadLinopidDRAWDOWNelf.pleadPLEAD

External Intelligence

Malpedia: win.plead

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search PLEAD