Black Basta Ransomware Group
Black Basta is a ransomware group whose internal chats leaked in February 2025, revealing negotiation patterns similar to the Kairos case.
Tag: threat actor
Kairos: Data-Theft Extortion Group
Kairos is a cyber extortion group that operates without encryption, relying solely on data theft and threats of public exposure. It demanded…
Star Blizzard: Russian Threat Actor Targeting Messaging Platforms
Star Blizzard is a Russian threat activity cluster known for phishing campaigns targeting messaging app users, including Signal and WhatsApp, to steal…
Lazarus Group: North Korean State-Sponsored Cyber Threat Actor
Lazarus Group is a North Korean state-sponsored cyber threat actor linked to numerous cyber espionage and financial theft operations. In this investigation,…
Hackledorb Threat Actor
Hackledorb is the threat actor behind DragonForce ransomware, known for pivoting to a highly organized cartel structure and deploying sophisticated backdoors like…
GrayBravo: Threat Activity Cluster Behind CastleLoader and CastleStealer
GrayBravo is a threat activity cluster attributed to distributing CastleLoader and CastleStealer malware. The group is known for using ClickFix-style lures and…
InCrease: Threat Actor Behind Amadey Malware-as-a-Service
InCrease is the threat actor who advertises and sells the Amadey malware loader under a malware-as-a-service model. The actor charges $600 for…
plymouth: Threat Actor Behind StealC Infostealer
plymouth is the threat actor who sells the StealC information stealer under a malware-as-a-service model, charging $300 per month or $1,000 for…