Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

Deep Web Profile: AgainstTheWest / BlueHornet SOCRadar

Deep Web Profile: AgainstTheWest / BlueHornet [Part 1]

In October 2021, a new leak group emerged in RaidForums with the handle AgainstTheWest. They have started actively targeting major organizations and state-affiliated corporations in China. Part 1: The Birth…

Lapsus$ Extortion Group SOCRadar

Dark Web Profile: Lapsus$ Extortion Group

[Update] August 11, 2023: The Cyber Safety Review Board (CSRB) published a review of the Lapsus$ extortion group’s attacks. Read more under: “A Review of Lapsus$ by CSRB.” The Lapsus$…

AvosLocker Ransomware SOCRadar

Dark Web Profile: AvosLocker Ransomware

AvosLocker was first detected in 2021 , and it usually appears as ransomware targeting Windows systems. After a variant targeting Linux environments emerged, striking attacks began to occur. The group,…

Dark Web Profile: Who is ‘Stormous Ransomware’ Claiming to Leak Epic Games Information SOCRadar

Dark Web Profile: Who is ‘Stormous Ransomware’ Claiming to Leak Epic Games Information

[Update] July 28, 2023: The Stormous ransomware gang has recently made a comeback. Added the subheading: “Stormous Ransomware Gang Resurfaces with New Data Leak Site and Partnerships” The Stormous ransomware…

Dark Web Threat Profile: Cuba Ransomware Group SOCRadar

Dark Web Threat Profile: Cuba Ransomware Group

Cuba is a C++ based ransomware , and Cuba Ransomware group uses it as the final step payload for double extortion attacks. Operators utilize Cuba in combination with a data…

Dark Web Profile: Lazarus Group SOCRadar

Dark Web Profile: Lazarus Group

[Update] January 30, 2025: See the subheading: “Latest Operations of Lazarus” [Update] December 12, 2023: See the subheading: “Lazarus Uses Log4Shell in Operation Blacksmith, Deploys New Malware: NineRAT, DLRAT, and…

Dark Web Profile: Phobos Ransomware SOCRadar

Dark Web Profile: Phobos Ransomware

Phobos ransomware, first discovered in December 2018, is another notorious cyber threat that targets businesses. Unlike other cybercrime gangs that go after big hunts, the Phobos bad guys usually go…

Dark Web Threat Profile: Grief Ransomware Group SOCRadar

Dark Web Threat Profile: Grief Ransomware Group

New  ransomware  called Grief was considered to be a new operation at first. Security researchers noticed that a new Grief gang carries similarities with the DoppelPaymer crew. On the other…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action