Threat Actors

APT groups, cybercrime crews, and hacktivist collectives

• Phorpiex534 words

  **Phorpiex** is a botnet known for its involvement in various cybercriminal activities, including spamming, data theft, and the distribution of other

• Killnet526 words

  **Killnet** is a threat actor group known for conducting cyberattacks, primarily using distributed denial-of-service (DDoS) tactics. The group has gai

• ShadowPad656 words

  **ShadowPad** is a sophisticated modular malware platform first identified in 2015. It is primarily used for cyber espionage and has been linked to va

• ShinyHunters632 words

  **ShinyHunters** is a cybercriminal group known for its involvement in data breaches and selling stolen data on underground forums. The group gained n

• RokRAT625 words

  **RokRAT** is a remote access trojan (RAT) primarily used for cyber espionage. It has been linked to various cyber campaigns targeting organizations i

• Carbanak896 words

  **Carbanak** is a sophisticated malware family primarily used in cyberattacks targeting financial institutions. It is known for enabling cybercriminal

• Black hat (computer security)654 words

  **Black Hat (Computer Security)** In computer security, a **black hat** refers to an individual who engages in malicious or unethical hacking activit

• Titan Rain511 words

  **Titan Rain** refers to a series of coordinated cyber espionage activities that targeted various United States government and defense contractor netw

• HAFNIUM593 words

  **HAFNIUM** is a state-sponsored threat actor group believed to be operating out of China. The group gained significant attention in early 2021 due to

• LoJax557 words

  **LoJax** is a type of malware known for its ability to persist on infected systems by targeting the Unified Extensible Firmware Interface (UEFI), a c

• Regin600 words

  **Regin** is a highly sophisticated cyber espionage malware platform known for its stealth and advanced capabilities. Discovered in 2014, Regin is bel

• Crimson Collective639 words

  Crimson Collective is a cyber threat actor group known for its sophisticated cyber espionage activities. The group has been linked to several high-pro

• KEYPLUG579 words

  **KEYPLUG** is a malware family known for its sophisticated capabilities and use in cyber espionage campaigns. It is primarily associated with advance

• Drovorub713 words

  **Drovorub** is a sophisticated malware toolkit attributed to Russian state-sponsored threat actors. It is primarily designed for Linux systems and is

• DarkSide638 words

  **DarkSide** is a ransomware strain that gained notoriety for its sophisticated operations and high-profile attacks. First identified in 2020, DarkSid

• JADESNOW515 words

  **JADESNOW** is a sophisticated malware family identified for its advanced capabilities in cyber espionage and data exfiltration. It primarily targets

• SideCopy545 words

  **SideCopy** is a threat actor group known for its cyber espionage activities, primarily targeting entities in South Asia. The group is believed to ha

• Taidoor595 words

  **Taidoor** is a malware family primarily associated with cyber espionage activities. It has been active since at least 2008 and is often linked to ad

• Phisher660 words

  **Phisher** is a term used to describe an individual or group that engages in phishing, a type of cyber attack aimed at deceiving individuals into rev

• British Airways data breach615 words

  The British Airways data breach was a significant cybersecurity incident that occurred in 2018, affecting approximately 380,000 transactions. Attacker