01
Cyber Com
Hacking, SIM swapping, swatting, ransomware, social engineering.
Scattered Spider sits here.
01 · The parent ecosystem
The Com is not a group. It is a mesh.
Short for The Community. A decentralized, cross-platform network of hundreds to thousands of actors, mostly ages 11–25, operating across Discord, Telegram, Roblox, Minecraft, and self-harm forums.
Three pillars, per researcher Marc-André Argentino and West Point CTC: Cyber, Sextortion, Offline. 764 is the largest node inside it — not the whole of it.
Recruitment starts with flattery and romance. Status is earned by harm severity. There is no central membership list. Fluid. Competitive. Clout-driven.
- Flattery and romance first, then escalation.
- Gaming platforms and mental-health communities are the entry points.
- Status is earned by harm severity.
- No central membership list — fluid, competitive, clout-driven.
02 · Three pillars
Cyber. Sextortion. Offline.
02
Sextortion Com
Grooming of minors, coercion, blackmail, status earned by harm.
Victim material is not reproduced here. The crime is named. The files are not.
03
Offline Com
Vandalism, arson, stabbings, unprovoked attacks, school-shooter glorification.
Real-world violence as clout.
03 · The largest node
764 survived its founder.
- Node
- 764
- Founded
- 2021
- Founder
- Bradley Cadenhead (Brad764)
- Place
- Stephenville, Texas — named after his ZIP
- Lineage
- Split from CVLT
- Sentence
- Cadenhead is serving 80 years
Largest and most influential node inside The Com. The brand survived him through constant rebranding. The name is a ZIP code that became a brand that became a template.
04 · Public record
Factions, tribes, and names that do not map.
Core 764 splinters
- 8884
- 7997
- 6996
- 676
- 404
- 545
- 555
- 2992
- 303
- SR1
- XVN
- NMK
- Slit Town
- Extorters V4
Inner circles
- Tophet
- 764 Inferno
Offshoots
- Harm Nation (Kyle Spitze, 77 years)
- Leak Society
- Court / Courtbox
- Kaskar
- H3ll
- CVLTIST
Offline-violence allies
- No Lives Matter (NLM — broke April 2024, re-allied September 2024)
- Maniac Murder Cult (MKU / MKY / MMC)
- Satanic Front
- Greggy's Cult (precursor)
Adjacent
- True Crime Community (TCC)
- O9A / Order of Nine Angles (aesthetic influence, not operational control)
- Mordwaffen Division
05 · West Point · FBI · Europol
The numbers already published.
0
Com-linked arrests
33 countries through May 2026 (West Point)
0
Victims documented
In that arrest set
0
Sextortion victims
Named in the West Point set
0
Swatting victims
Named in the West Point set
0
Fatalities
Documented in that set
0
Animals crushed
Documented in that set
0+
Offshoot subjects
FBI, all 56 field offices, as of Sep 3 2026
Europol Project Compass
30 arrests, 179 identified members, 4,340 URLs referred — July 2026.
Canada
Designated 764 a terrorist entity.
EU ProtectEU
Named "764 or Com networks" — March 2026.
United States
First federal juvenile NVE adjudication: Maine, age 17, September 1, 2026.
06 · Orange County
Two named subjects. No hall roster.
Dong Hwan Kim
Downey
Arrested August 2025
Bryant Najera Gonzalez
Downey
Charged February 2026
No published Com or 764 cases inside Orange County Juvenile Hall or Theo Lacy. The demographic fits the network's age range. No roster exists in public sources.
07 · UNC3944 · June 2025
insomnia.exe and the IPs already in the feeds.
SHA-256 and remote-access addresses from the June 2025 Scattered Spider threat-actor profile. Labeled API component. Companion hash IIatZ is backconnect. Copy any indicator. None of this is new.
Hashes
insomnia.exe
API component. June 2025 Scattered Spider / UNC3944 profile.
IIatZ
Backconnect. Companion to insomnia.exe.
packed Fleet
lockhuntersetup_3-4-3.exe
mpbec
Connects to 67.43.235.122 on ports 4444 / 8888.
IPv4 · remote access / MFA registration
87 of 87 shown. Tap to copy.
IPv6
- transfer.sh exfil
08 · CISA AA23-320A
Updated July 29, 2025. No new hashes. No new IPs.
CISA AA23-320A adds no hashes or IPs. All IOCs on this docket come from the June 2025 Scattered Spider / UNC3944 profile and are already in FBI, CISA, and vendor feeds.
Malware named
- AveMaria / WarZone
- Raccoon Stealer
- VIDAR
- RattyRAT
- DragonForce ransomware
Remote tools
Phishing patterns
Exfil
Transcript
Part One · God’s Wrath
09 · Duty
If you see it, report it.
The light does not negotiate with the dark. It records it.
Sources: West Point CTC, Marc-André Argentino, FBI, Europol Project Compass, CISA AA23-320A, UNC3944 vendor profile (June 2025). All indicators on this docket were already in FBI, CISA, and vendor feeds. No new IOCs.