Latest articles
SOCRadar
Dark Web Profile: Andariel
Andariel operates as a North Korea–linked threat group under the Reconnaissance General Bureau (RGB). Security researchers widely assess it as a sub-cluster of the Lazarus Group. Since around 2009, Andariel…
SOCRadar
Dark Web Profile: Lotus Blossom
Lotus Blossom is a long-running cyber espionage Advanced Persistent Threat (APT) group active since at least 2009 and widely attributed to the People’s Republic of China (PRC). The threat group…
SOCRadar
Dark Web Profile: Sinobi Ransomware
Sinobi Ransomware is a cybercrime operation that emerged in mid-2025, operating as a Ransomware-as-a-Service model. It is believed that the group is a rebrand or direct successor of the Lynx…
SOCRadar
Dark Web Profile: The Gentlemen Ransomware
Despite its polished name, The Gentlemen Ransomware shows little interest in playing nice. First observed in 2025, the group quickly established itself as a capable and coordinated threat, operating across…
SOCRadar
Dark Web Profile: 0APT Ransomware
0APT, also recognized as the 0APT Syndicate, is a controversial Ransomware-as-a-Service operation that surfaced in late January 2026. The group rapidly gained notoriety by listing hundreds of high-profile victims on…
SOCRadar
Dark Web Profile: BravoX Ransomware
BravoX is an emerging Ransomware-as-a-Service (RaaS) operation that surfaced after the publication of a new TOR-based data leak site (DLS) following a forum post on the RAMP underground forum. First…
SOCRadar
Dark Web Profile: Anubis Ransomware
Anubis (Sphinx) ransomware is a Ransomware-as-a-Service (RaaS) group that challenges one of the core assumptions of modern ransomware response: that recovery is always possible after payment. Alongside standard file encryption,…
SOCRadar
Dark Web Profile: APT28
APT28 is one of the most tracked state-linked intrusion sets because its activity often aligns with major geopolitical events and long-running espionage goals. Also known as Fancy Bear and Sofacy,…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action