Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: IntelBroker SOCRadar

Dark Web Profile: IntelBroker

[Update] June 26, 2025: “IntelBroker Identified and Charged by US Authorities: British National Kai West Faces Extradition” IntelBroker, a notorious figure known for orchestrating high-profile cyberattacks, operates within BreachForums. Specializing…

Dark Web Profile: dAn0n Hacker Group SOCRadar

Dark Web Profile: dAn0n Hacker Group

Global law enforcement agencies have ramped up their efforts against ransomware, leading to the weakening of groups and even dethroned the long ruled LockBit. However, following these operations, many small…

Dark Web Profile: SpaceBears SOCRadar

Dark Web Profile: SpaceBears

Recent history could be termed the Age of Ransomware in the realm of cybercrime. However, threat actors have discovered a way to profit without the need for malware development or…

Dark Web Profile: Qilin (Agenda) Ransomware SOCRadar

Dark Web Profile: Qilin (Agenda) Ransomware

[November 27, 2025] “Qilin’s Modus Operandi Before 2026’ [June 21, 2024] “Qilin Started Leaking Synnovis Data” Qilin, also known as Agenda ransomware, represents a formidable threat in cybercrime. This ransomware,…

Dark Web Profile: BlackSuit Ransomware SOCRadar

Dark Web Profile: BlackSuit Ransomware

[Update] Juuly 25, 2025: “BlackSuit Ransomware Infrastructure Seized by Authorities” [Update] August 8, 2024: “BlackSuit Ransomware Extorts Over $500 Million in Ransom Demands” BlackSuit ransomware is a rebranded version of…

Dark Web Profile: Hunt3r Kill3rs SOCRadar

Dark Web Profile: Hunt3r Kill3rs

In the ever-evolving landscape of cybersecurity threats, new groups like Hunt3r Kill3rs emerge with claims of disruptive capabilities. This analysis aims to provide an initial understanding of their activities, considering…

Dark Web Profile: Everest Ransomware SOCRadar

Dark Web Profile: Everest Ransomware

[Update] October 22, 2025: “Everest’s Claim on Collins Aerospace and EU Airport Disruption” In the constantly changing landscape of cyber threats, ransomware groups adapt their tactics to outmaneuver defenses. Everest…

Dark Web Profile: Dispossessor Ransomware SOCRadar

Dark Web Profile: Dispossessor Ransomware

[Update] August 13, 2024: “Repossessed: An FBI Operation” Dispossessor has recently emerged in the ransomware landscape, and it is especially notable for its similarities to the notorious LockBit group. Following an extensive crackdown by…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action