Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

APT Profile: Cozy Bear / APT29 SOCRadar

Dark Web Profile: Cozy Bear / APT29

[Update] October 11, 2024: “Joint Advisory Warns of Mass Exploitation of Zimbra and TeamCity Servers by APT29” [Update] February 27, 2024: See the subheading: “Joint Advisory on APT29’s Recent Initial…

Dark Web Profile: NoName057(16) SOCRadar

Dark Web Profile: NoName057(16)

By SOCRadar Research [Update] July 16, 2025: “Global Law Enforcement Cracks Down on NoName057(16): Operation Eastwood”   [Update] July 11, 2023: NoName recently launched a cyber attack on Poland, targeting critical…

Dark Web Profile: Hive Ransomware Group SOCRadar

Dark Web Profile: Hive Ransomware Group

by SOCRadar Research [Update] November 14, 2023: See the subheading: “New Era of Hive Ransomware Under Hunters International.” On November 8, 2021 electronics retail giant Media Markt has suffered a…

Dark Web Profile: Royal Ransomware SOCRadar

Dark Web Profile: Royal Ransomware

By SOCRadar Research [Update] November 14, 2023: See the subheading: “CSA Update from CISA and FBI: Royal Ransomware’s Possible Rebranding to ‘Blacksuit’”  Ransomware attacks have been rising in recent years,…

Dark Web Profile: Killnet - Russian Hacktivist Group SOCRadar

Dark Web Profile: Killnet – Russian Hacktivist Group

By SOCRadar Research The ongoing conflict between Ukraine and Russia has attracted the attention of various cybercriminal groups and pushed them to get involved in this  cyber warfare . According…

Dark Web Profile: Black Basta Ransomware SOCRadar

Dark Web Profile: Black Basta Ransomware

By SOCRadar Research [Update] May 13, 2024: Read the subheading “CISA’s Advisory for Black Basta”  [Update] January 3, 2024: Read the subheading “Turning the Tables on Black Basta”  One of…

Dark Web Profile: APT42 - Iranian Cyber Espionage Group SOCRadar

Dark Web Profile: APT42 – Iranian Cyber Espionage Group

By SOCRadar Research After the Stuxnet occurred in 2010 on Iran’s nuclear program, Iran started to invest in and improve its  cyberwarfare  capabilities. From that turning point, Iranian hacker groups…

Dark Web Profile: Overthinker1877 SOCRadar

Dark Web Profile: Overthinker1877

Overthinker1877 or 1877 Team have recently drawn attention for their random attacks worldwide . Although the first remarkable attack was ransomware against a Romanian news agency in May 2021, they…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action