[CRITICAL] | Active extortion campaign | Exposure window closed | Credential rotation and phishing defense required