Magecart: The Web Skimming Threat Behind PCI DSS Changes
Magecart is a collective of cybercriminal groups that specialize in web skimming attacks, injecting malicious scripts into e-commerce checkout pages to steal…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
LockBit — Attack group profile
LockBit was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
BlackCat Ransomware Group: Overview and Impact
BlackCat, also known as ALPHV, is a ransomware-as-a-service group that emerged in 2021. It targeted numerous organizations globally, using sophisticated encryption and…
Akira Ransomware: Defense Evasion Tactics and Safe Mode Reboot Incident
Akira ransomware continues to use defense evasion tactics, such as rebooting victim hosts into Safe Mode with Networking to disable security tools.…
Lynx Ransomware Affiliate Program
Lynx is a ransomware affiliate program that has been observed deploying DeadLock ransomware. This indicates a growing trend of affiliates using multiple…
Sinobi — Attack group profile
Sinobi was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Cybersecurity researchers have charted the evolution of INC from a nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups…
INC Ransomware Affiliate Program
INC Ransomware is another affiliate program that has been linked to the deployment of DeadLock ransomware. The collaboration between different ransomware groups…
Icarus: Extortion Group Behind Klue OAuth Token Abuse
Icarus is an extortion group active since April 28, 2026, responsible for compromising Klue's integration infrastructure and exfiltrating customer data via OAuth…
ShinyHunters: Notorious Data Breach Group
ShinyHunters is a well-known threat actor group infamous for large-scale data breaches and selling stolen data. They have previously exploited Salesforce guest…