Incident analysis
Some semi-samples Of Liberty X TMO cause we got yappatrons on twitter was listed by Byod ransomware, a group with 11 victims recorded in this database. The listing appeared on the group's leak site on October 8, 2026.
Byod typically follows a double extortion model: data is exfiltrated from the victim's systems before files are encrypted, so the victim faces two demands at once — pay to restore access, and pay to keep stolen data unpublished. The leak site, where this listing appeared, is the lever for the second demand.