Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Arkana Ransomware SOCRadar

Dark Web Profile: Arkana Ransomware

Arkana Ransomware emerged in early 2025, made its debut with a bold attack on WideOpenWest (WOW!), a U.S. internet provider, in late March 2025. The group claimed to have stolen…

Dark Web Profile: DragonForce Ransomware SOCRadar

Dark Web Profile: DragonForce Ransomware

June 12, 2025: The blog content has been fully updated. DragonForce Ransomware has emerged as an intriguing adversary. Known for its prominent targets and unusual ways of communication, it has…

Dark Web Profile: NightSpire Ransomware SOCRadar

Dark Web Profile: NightSpire Ransomware

NightSpire is a financially motivated ransomware group that emerged in early 2025. The group employs a double extortion strategy, encrypting victims’ data and threatening to publish it on their Dark…

Dark Web Profile: Aquatic Panda SOCRadar

Dark Web Profile: Aquatic Panda

Aquatic Panda is a suspected China-based threat group focused on intelligence gathering and industrial espionage. From around 2016 to 2023, the Chinese tech company i-Soon reportedly carried out global cyber…

Dark Web Profile: Silent Ransom Group (LeakedData) SOCRadar

Dark Web Profile: Silent Ransom Group (LeakedData)

A threat group identifying itself as LeakedData emerged in mid-December 2024, claiming responsibility for attacks on at least 41 victims. Header of LeakedData’s Data Leak Site (DLS) Early speculation from…

Dark Web Profile: Flax Typhoon SOCRadar

Dark Web Profile: Flax Typhoon

Intelligence reports confirm that Flax Typhoon (also tracked as RedJuliett and Ethereal Panda) is a sophisticated Chinese state-sponsored Advanced Persistent Threat (APT) group, operational since at least mid-2021. The group…

Dark Web Profile: Babuk/Babuk2 SOCRadar

Dark Web Profile: Babuk/Babuk2

Babuk, originally emerging in 2020, became infamous for its ransomware attacks on large organizations and government agencies. After internal conflicts led to the leak of its source code, the group…

Dark Web Profile: FSociety (Flocker) Ransomware SOCRadar

Dark Web Profile: FSociety (Flocker) Ransomware

FSociety or Flocker ransomware, discovered in 2024, is a relatively new strain operating as Ransomware-as-a-Service (RaaS), enabling cybercriminals to exploit its features without requiring deep technical expertise. Developed by the…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action