OTX Threat: n0n Ransomware: Inside an AI-Assisted Extortion Operation

In September 2026, an exposed staging server revealed the complete operational workspace of a n0n ransomware operator, including breach tools, encryptor source code, extortion infrastructure, and an AI coding agent environment with over $7,000 in paid LLM API usage. The investigation identified at least 23 victim organizations across 14 countries spanning multiple sectors. Every documented comprom Sectors: Retail, Technology, Education