> TritonInfoSec News
Home / Jul 27, 2026 / Story
0
#3 The Hacker News general July 25, 2026 at 09:53 UTC

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

By [email protected] (The Hacker News)

AI Summary

PRODAFT researchers tracking the DevMan ransomware-as-a-service operation (internally dubbed Funky Mantis) have detailed a centralized web portal enabling affiliates to build custom payloads, manage victims, and track affiliate payouts in one dashboard. The platform's consolidation of build generation, finance tracking, and victim management reflects increasing professionalization of RaaS infrastructure. Threat intelligence teams should monitor for DevMan/Funky Mantis indicators as the lowered operational barrier for affiliates likely expands the group's attack volume.

Read full article → https://thehackernews.com/2026/07/devman-raas-port…

Relevance score: 68.0/100

# More from July 27

  1. 1
    MCBS Data Breach Affects 1.2 Million Individuals SecurityWeek
  2. 2
    GitHub, PyPI add time-absed defenses against supply chain attacks BleepingComputer
  3. 4
    Steam forum ClickFix attacks infect gamers with XMRig cryptominers BleepingComputer
  4. 5
    CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking The Hacker News
  5. 6
    Malicious sites use JavaScript to build malware in browser memory BleepingComputer
  6. 7
    ShinyHunters data leaks fuel $2,000 sextortion email scam BleepingComputer
  7. 8
    Rockwell Patches Code Execution Flaws in Arena Simulation Software SecurityWeek
  8. 9
    Big Tech accused of stonewalling European social media researchers Ars Technica Security
  9. 10
    OpenAI confirms ChatGPT is down worldwide BleepingComputer