Hackers made death threats against this security researcher. Big mistake.

2026-02-16 · Source: MIT Technology Review · Field: Technology & Digital — Cybersecurity & Data Privacy, Data Science & Analytics · Depth: Novice, extended

Summary

Allison Nixon, Chief Research Officer at Unit 221B, became the target of death threats and AI-generated nudes in April 2024 from online personas "Waifu" and "Judische." These threats stemmed from her decade-long career tracking and unmasking members of "The Com," a loose affiliation of young, anarchic hackers primarily in North America and English-speaking Europe. The Com's activities have escalated from DDoS attacks to SIM-swapping, crypto theft, ransomware, corporate data theft, and offline violence including swatting and even stabbings. Nixon's unique approach involves lurking in online channels, using pseudonyms, and meticulously piecing together clues from hackers' careless operational security mistakes. Her work has led to the arrest of over two dozen Com members since 2011. The threats against Nixon intensified after Waifu's group was involved in a large hack of AT&T customer call records from Snowflake accounts, which included FBI agents' numbers, leading to their reckless taunting of Nixon.

Key takeaway

For cybersecurity leaders assessing emerging threats, the evolution of groups like "The Com" from digital disruption to physical violence and sophisticated financial crimes underscores a critical shift. You should prioritize intelligence gathering on seemingly "minor" online communities, as their capabilities and impact can rapidly escalate. Implement proactive monitoring of public and semi-private online forums to identify nascent criminal trends and individuals, building dossiers before they become high-profile incidents, as this significantly aids law enforcement and reduces response times.

Key insights

Cybercrime groups like "The Com" pose significant threats, escalating from digital to physical violence, often driven by ego and financial gain.

Principles

• Careless OPSEC is a primary vulnerability for cybercriminals.
• Early tracking of nascent threats yields long-term intelligence.
• Ego often undermines cybercriminals' financial motives.

Method

Investigators can unmask cybercriminals by drawing an investigative circle around a target and their online associates, studying interactions, and leveraging information from their enemies or former partners to narrow down identities.

In practice

• Monitor online forums for early indicators of emerging threats.
• Prioritize OPSEC in all online activities.
• Document and preserve online criminal communications.

Topics

• The Com Cybercrime Group
• Cybercriminal Tracking
• SIM Swapping Attacks
• Online Threat Intelligence
• Sextortion Campaigns

Best for: CTO, VP of Engineering/Data, Executive, Security Engineer, Research Scientist, Policy Maker

Related on AIssential

• Hackers made death threats against this security researcher. Big mistake. — Proactive intelligence gathering and persistent tracking are crucial for unmasking evolving cybercriminal groups and anticipating their next moves.
• FBI’s 2025 Internet Crime Report — The FBI's 2025 Internet Crime Report reveals emerging AI-related crimes and underscores the debate on systemic versus individual responsibility for cybercrime.
• UK could face ‘hacktivist attacks at scale’, says head of security agency — Geopolitical conflict could trigger large-scale hacktivist attacks in the UK, mirroring ransomware impacts but without recovery options.
• Out of the Crypt: The Evolving Cyber Extortion Economy — Data theft and regulatory pressure now drive cyber extortion, with AI poised to drastically accelerate attack timelines.
• The growing cyber exposure risk you can’t afford to ignore — Proactive cyber exposure management is crucial for anticipating and mitigating risks in complex digital environments.
• While Everyone Watches Glasswing, Attackers Are Walking Through Your Front Door. — Most major cyberattacks exploit common, known vulnerabilities, not zero-days, with AI accelerating their scale.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by MIT Technology Review.