Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Vect Ransomware SOCRadar

Dark Web Profile: Vect Ransomware

Most new ransomware operations spend their first months in the shadows, courting affiliates one at a time on closed forums. Vect did the opposite. Within four months of its December…

Dark Web Profile: BlindEagle SOCRadar

Dark Web Profile: BlindEagle

BlindEagle (APT-C-36 / AguilaCiega / TAG-144 / G0099 / APT-Q-98) is a threat actor believed to be operating from Latin America. Tracked since 2018, the group runs a hybrid espionage-and-cybercrime…

Dark Web Profile: CoinbaseCartel SOCRadar

Dark Web Profile: CoinbaseCartel

CoinbaseCartel is a financially motivated threat actor that emerged on the Dark Web in September 2025. Unlike traditional ransomware groups, the group does not encrypt victim systems. Instead, it relies…

Dark Web Profile: Keymous+ SOCRadar

Dark Web Profile: Keymous+

Keymous Plus, also known as Keymous+ threat group, markets itself as a hacktivist collective fighting for humanity. What intelligence investigations have documented is structurally different: a North African hybrid actor…

Dark Web Profile: TeamPCP SOCRadar

Dark Web Profile: TeamPCP

TeamPCP is a financially motivated cybercriminal group that executed the most consequential open-source supply chain attack campaign of 2026, compromising security tools trusted by hundreds of thousands of organizations. Operating…

Dark Web Profile: DieNet SOCRadar

Dark Web Profile: DieNet

Every kinetic spike in the Iran-Israel confrontation is now mirrored by a surge of cyber activity. In this environment, DieNet has emerged as the single most prolific disruptive force on…

Dark Web Profile: Handala Hack SOCRadar

Dark Web Profile: Handala Hack

[Update] March 30, 2026: “FBI Director Personal Email Breach and Escalating Operations”, “Alleged Doxxing Campaign Targets Handala Members” Not every hacktivist group is what it claims to be. Handala presents…

Dark Web Profile: APT41 SOCRadar

Dark Web Profile: APT41

APT41 stands out in the threat landscape because it doesn’t stick to a single playbook. It has been repeatedly linked to both cyber espionage and financially motivated cybercrime, sometimes running…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action