Threat Actors

APT groups, cybercrime crews, and hacktivist collectives

• Sandworm631 words

  **Sandworm** is a threat actor group known for its sophisticated cyber operations targeting various sectors, including energy, transportation, and gov

• Berserk Bear579 words

  **Berserk Bear** is a cyber threat actor group believed to be linked to Russian state-sponsored activities. Known for targeting critical infrastructur

• Magecart546 words

  **Magecart** is a term used to describe a collection of cybercriminal groups known for their involvement in web-based card skimming attacks. These gro

• Avalanche (phishing group)639 words

  **Avalanche (phishing group)** Avalanche was a cybercriminal group known for its extensive phishing campaigns and malware distribution activities. Th

• Cyberwarfare687 words

  **Cyberwarfare** refers to the use of digital attacks by one nation-state to disrupt the computer systems of another, with the aim of creating damage

• Griffon497 words

  **Griffon** is a type of malware primarily associated with cyber espionage activities. It is designed to infiltrate target systems, collect sensitive

• Scanbox622 words

  **Scanbox** is a reconnaissance framework used by threat actors to gather information about potential targets. It operates by injecting malicious Java

• ValleyRAT519 words

  ValleyRAT is a remote access trojan (RAT) that has been used in various cyber espionage campaigns. This malware allows attackers to gain unauthorized

• LightSpy635 words

  **LightSpy** is a sophisticated mobile malware family primarily targeting iOS devices. It is known for its advanced capabilities in data exfiltration

• NOTROBIN511 words

  **NOTROBIN** is a malware family identified by cybersecurity researchers as a tool used to maintain persistence on compromised systems. It is primaril

• BlackEnergy544 words

  **BlackEnergy** is a sophisticated malware family known for its use in cyber espionage and cyber attacks, particularly against critical infrastructure

• KongTuke506 words

  KongTuke is a type of malware that has been observed targeting various sectors. As of October 2023, it is known for its sophisticated techniques to ev

• VoidLink557 words

  **VoidLink** is a malware family known for its sophisticated capabilities in data exfiltration and stealth operations. It primarily targets organizati