Top 10 APT Groups in 2025
Top 10 APT Groups in 2025 Advanced Persistent Threats, known as APTs, represent some of the most capable cyber adversaries. These groups are often state-backed or part of well funded organizations and...
Top 10 Ransomware Groups of 2025
Top 10 Ransomware Groups of 2025 The Top 10 Ransomware Groups of 2025 illustrate how the ransomware ecosystem changed in structure rather than simply growing in volume. After the disruption of dominan...
Dark Web Profile: ByteToBreach
Dark Web Profile: ByteToBreach By mid-2025, the alias ByteToBreach was already an active seller on a major cybercrime forum, offering access and databases from banks, telecom, airlines, and other larg...
Dark Web Profile: Berserk Bear
Dark Web Profile: Berserk Bear Berserk Bear is a Russian state-sponsored cyber espionage group linked to the FSB. They have been active since at least 2010 under many names (Dragonfly, Energetic Bear,...
Dark Web Profile: Sarcoma Ransomware
Dark Web Profile: Sarcoma Ransomware Sarcoma ransomware group emerged in late 2024 and quickly launched aggressive double-extortion campaigns worldwide; Sarcoma’s fast-growing victim list and use of s...
Dark Web Profile: Scattered Lapsus$ Hunters
Dark Web Profile: Scattered Lapsus$ Hunters [Update] November 28, 2025: “Is the DLS Already on Its Way Out?” and “Rey, ShinySp1d3r and the Gainsight Breach” In mid-2025, attackers launched coordinated...
Dark Web Profile: Dire Wolf Ransomware
Dark Web Profile: Dire Wolf Ransomware Dire Wolf emerged in 2025 and quickly carried out disruptive ransomware attacks in multiple regions. Dire Wolf appeared on dark web leak sites within weeks and w...
Dark Web Profile: BQTLock Ransomware
Dark Web Profile: BQTLock Ransomware BQTLock is a new and advanced Ransomware-as-a-Service (RaaS) that has quickly gained attention for its disruptive operations and unique methods. Emerging from the ...
Dark Web Profile: Mr Hamza
Dark Web Profile: Mr Hamza Hacktivist groups like Mr Hamza have turned Telegram into a staging ground for cyber campaigns. These channels serve as meeting points where supporters coordinate Distribute...
Dark Web Profile: GLOBAL Ransomware
Dark Web Profile: GLOBAL Ransomware GLOBAL Ransomware, also known as the GLOBAL GROUP, is a newly branded Ransomware-as-a-Service (RaaS) operation that surfaced in mid-2025. Despite being presented as...
Dark Web Profile: Lynx Ransomware
Dark Web Profile: Lynx Ransomware Lynx is a ransomware group that appeared in mid-2024 and is widely believed to be a rebrand of the INC ransomware operation. The group follows a Ransomware-as-a-Servi...
Dark Web Profile: Beast Ransomware
Dark Web Profile: Beast Ransomware Beast Ransomware is the evolved form of an earlier strain known as Monster, first detected in March 2022 during an investigation by the BlackBerry Incident Response ...
Dark Web Profile: Void Blizzard
Dark Web Profile: Void Blizzard Void Blizzard is a newly identified Russian state-sponsored cyber threat group. Also known as Laundry Bear, the group first drew attention after an attack on the Dutch ...
Dark Web Profile: Interlock Ransomware
Dark Web Profile: Interlock Ransomware Interlock is a ransomware group active since late 2024, most recently gaining attention for its use of advanced social engineering tactics. Its latest technique,...
Dark Web Profile: CrazyHunter Ransomware
Dark Web Profile: CrazyHunter Ransomware On February 9, 2025, Taiwan MacKay Memorial Hospital suffered a major ransomware attack. It hit the emergency and outpatient systems at both the Taipei and Tam...
Dark Web Profile: Arkana Ransomware
Dark Web Profile: Arkana Ransomware Arkana Ransomware emerged in early 2025, made its debut with a bold attack on WideOpenWest (WOW!), a U.S. internet provider, in late March 2025. The group claimed t...
Dark Web Profile: DragonForce Ransomware
Dark Web Profile: DragonForce Ransomware June 12, 2025: The blog content has been fully updated. DragonForce Ransomware has emerged as an intriguing adversary. Known for its prom...
Dark Web Profile: NightSpire Ransomware
Dark Web Profile: NightSpire Ransomware NightSpire is a financially motivated ransomware group that emerged in early 2025. The group employs a double extortion strategy, encrypting victims’ data and ...
Dark Web Profile: Aquatic Panda
Dark Web Profile: Aquatic Panda Aquatic Panda is a suspected China-based threat group focused on intelligence gathering and industrial espionage. From around 2016 to 2023, the Chinese tech company i-S...
Dark Web Profile: Silent Ransom Group (LeakedData)
Dark Web Profile: Silent Ransom Group (LeakedData) A threat group identifying itself as LeakedData emerged in mid-December 2024, claiming responsibility for attacks on at least 41 victims. Header of ...