Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Cyber Toufan Al-aqsa SOCRadar

Dark Web Profile: Cyber Toufan Al-aqsa

On November 16 2023, a new group emerged in the intricate web of modern cyber warfare: Cyber Toufan. This group, shrouded in the digital shadows, has recently gained notoriety for…

APT Profile: Volt Typhoon SOCRadar

Dark Web Profile: Volt Typhoon

[Update] March 13, 2025: Volt Typhoon Maintained Access to U.S. Utility Systems for Nearly a Year  [Update] February 01, 2024: U.S. Government Actions Against Volt Typhoon As cyber currents ebb…

Threat Actor Profile: SiegedSec SOCRadar

Dark Web Profile: SiegedSec

[Update] July 11, 2024: “SiegedSec Disbands” In the ever-changing digital landscape, new cyber adversaries continuously emerge. One of the latest entrants in this arena is SiegedSec, an emergent cyber threat…

APT Profile: Dark Pink APT Group SOCRadar

Dark Web Profile: Dark Pink APT Group

The realm of cybersecurity is becoming more and more chaotic with each passing day, and there will always be a new actor entering the world of cybersecurity. The Dark Pink…

Dark Web Profile: Snatch Ransomware SOCRadar

Dark Web Profile: Snatch Ransomware

According to CISA, since the latter part of 2021, the perpetrators behind Snatch Ransomware have persistently adapted their strategies, capitalizing on prevailing tendencies and the operational successes of other ransomware…

Dark Web Profile: NoEscape Ransomware SOCRadar

Dark Web Profile: NoEscape Ransomware

Avaddon, a notorious Ransomware-as-a-Service (RaaS) that emerged in early 2019 was known for its double-extortion tactics. It not only encrypted victims’ files but also threatened to release stolen data publicly.…

Unmasking USDoD: The Enigma of the Cyber Realm SOCRadar

Dark Web Profile: USDoD

[Update] October 17, 2024: See the subheading: “Brazilian Arrest Tied to USDoD” [Update] August 26, 2024: See the subheading: “Is USDoD’s Identity Revealed?” [Update] April 22, 2024: See the subheading:…

Dark Web Profile: Medusa Ransomware (MedusaLocker) SOCRadar

Dark Web Profile: Medusa Ransomware (MedusaLocker)

[Update] October 8, 2025: Microsoft Attributes GoAnywhere Exploitation to Medusa Ransomware Group [Update] March 13, 2025: CISA, FBI, and MS-ISAC Warn of Medusa Ransomware Threats in New Advisory In ancient…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action