Threat Actor Intelligence

Search and analyze cyber threat actors across open, deep, and dark web sources.

Primary Alias	Known Aliases	Actor Type	Risk Score	Reputation	Forums	Telegram	Last Active	Confidence	Threat	State
LockBit 3.0	LockBit BlackABCD Ransomware+1	Ransomware	—	—	—	—	2025-12-05	—	CRIT	Active
REvil	SodinokibiSodin	Ransomware	—	—	—	—	2022-01-14	—	CRIT	Dormant
Scattered Spider	StarfraudUNC3944+1	Social Engineering	—	—	—	—	2026-07-04	—	HIGH	Active
SiegedSec	SiegedSec Group	Hacktivist	—	—	—	—	2024-03-01	—	MED	Active
IntelBroker	Intelbroker	Data Broker	—	—	—	—	2026-02-14	—	HIGH	Dormant
APT29	Cozy BearThe Dukes+1	Nation-State	—	—	—	—	2026-01-12	—	CRIT	Active
Lazarus Group	Hidden CobraAPT38	Nation-State	—	—	—	—	2024-03-13	—	CRIT	Active
IncRansom	IncRansom Group	Ransomware	—	—	—	—	2025-11-20	—	HIGH	Active
SafePay		Ransomware	—	—	—	—	2025-10-14	—	HIGH	Active
The Gentlemen	theGentlemen	Ransomware	—	—	—	—	2025-09-03	—	HIGH	Active
DragonForce	Dragon Force	Ransomware	—	—	—	—	2025-08-18	—	CRIT	Active
Qilin	Agenda	Ransomware	—	—	—	—	2025-07-29	—	HIGH	Active
Play	PlayCrypt	Ransomware	—	—	—	—	2025-12-01	—	CRIT	Active
KillSec	Kill Security	Hacktivist	—	—	—	—	2025-11-05	—	HIGH	Active
Stormous	Stormous Team	Hacktivist	—	—	—	—	2025-10-22	—	MED	Active
BrainCipher		Ransomware	—	—	—	—	2025-09-17	—	HIGH	Active
SpaceBears		Ransomware	—	—	—	—	2025-08-09	—	MED	Active
RansomHouse	White Rabbit	Ransomware	—	—	—	—	2025-07-15	—	HIGH	Active
Lynx		Ransomware	—	—	—	—	2025-11-30	—	HIGH	Active
NightSpire		Ransomware	—	—	—	—	2025-10-01	—	MED	Active
Cl0p	TA505Clop	Ransomware	—	—	—	—	2025-06-11	—	CRIT	Active
Everest	Everest Team	Ransomware	—	—	—	—	2025-08-04	—	HIGH	Active
ThreeAM	3AM	Ransomware	—	—	—	—	2025-07-22	—	HIGH	Active
Embargo		Ransomware	—	—	—	—	2025-09-10	—	MED	Active
Fog	Fog Ransomware	Ransomware	—	—	—	—	2025-10-05	—	MED	Active

42 of 42 actors · 36 active