Threat Actors

TargetCompany is a relatively small and closed group. However, in 2023, the group appears to be working to expand its...

LockBit is a highly sophisticated and infamous cybercriminal group specializing in ransomware operations. Founded on the principles of...

RansomHub has swiftly made its mark in the ransomware landscape by substantiating its claims with data leaks, starting with its...

Nusa Cloud is a cybercriminal group that surfaced in September 2023, leveraging the anonymity of the Telegram platform under the...

Scattered Spider is a native English-speaking cybercriminal group that has been active since at least 2022. Initially, the group targeted...

Cuba ransomware was first observed in December 2019 but only gained notoriety in November 2021 when the FBI posted an...

Muddling Meerkat is a newly identified cluster, believed to be a People’s Republic of China (PRC) nation-state actor. This group...

UNC5537 has only recently been formally identified and tracked by Mandiant, thus appearing solely in Mandiant’s taxonomy for the time...

Since June 2022, the Play (also known as Playcrypt) ransomware group has impacted a wide range of businesses and critical...