Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Threat Actor Profiles

Latest SOCRadar research and analysis on Threat Actor Profiles: threat reports, advisories and practical guidance for security teams.

Latest articles

Dark Web Profile: Moonstone Sleet SOCRadar

Dark Web Profile: Moonstone Sleet

Moonstone Sleet AKA Storm-1789, a newly identified North Korean Advanced Persistent Threat (APT) group, has been making waves with its targeted cyberattacks that blend espionage with financial motivations. Operating under…

Dark Web Profile: Cadet Blizzard SOCRadar

Dark Web Profile: Cadet Blizzard

Cadet Blizzard (DEV-0586) is a Russian GRU-affiliated cyber threat group first tracked by Microsoft in early 2022, following a series of disruptive cyberattacks on Ukrainian government agencies amidst rising military tensions. These…

Dark Web Profile: CosmicBeetle (NoName) Ransomware SOCRadar

Dark Web Profile: CosmicBeetle (NoName) Ransomware

CosmicBeetle, also known as NoName, is a ransomware group that has targeted small to medium enterprises globally with its customized ransomware tools. Notably active since 2020 and gaining traction in…

Dark Web Profile: KillSec SOCRadar

Dark Web Profile: KillSec

In today’s rapidly evolving cyber landscape, threat actors are continuously refining their tactics, techniques, and procedures (TTPs) to exploit vulnerabilities across various industries. This article delves into the activities of…

Dark Web Profile: Tropic Trooper (APT23) SOCRadar

Dark Web Profile: Tropic Trooper (APT23)

Tropic Trooper, also known as Pirate Panda and APT 23, is a Chinese state-sponsored cyber threat group that has been active since 2011. Specializing in espionage, the group primarily targets…

Dark Web Profile: Evil Corp SOCRadar

Dark Web Profile: Evil Corp

Evil Corp, also known as Indrik Spider, is a pro-Russian hacktivist group that is involved in large-scale financial cyberattacks. Since 2007, Evil Corp has constantly evolved its tactics, ranging from…

Dark Web Profile: UserSec SOCRadar

Dark Web Profile: UserSec

UserSec, a pro-Russian hacktivist group, first gained attention in early 2023. The group actively targets Western governments, organizations, and critical infrastructure, particularly those affiliated with NATO and supporters of Ukraine.…

Dark Web Profile: Just Evil SOCRadar

Dark Web Profile: Just Evil

[Update] October 23, 2024: “Founder of Just Evil and KillNet Allegedly Killed in Drone Attack” Just Evil is a pro-Russian cyber threat group formed in January 2024 by KillMilk. This…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action