ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Actores de amenaza
2329 grupos.
2329 actores
threat-actor
Lockbit is a financially motivated cybercriminal organization that emerged in September 20...
4032 incidentes RU
Jun 2026
ransomware
Qilin is a ransomware-as-a-service (RaaS) operation that emerged in July 2022, initially k...
3866 incidentes RU
Jul 2026
threat-actor
INC Ransom is a ransomware and data extortion threat group associated with the deployment ...
3328 incidentes RU
Jul 2026
ransomware
Akira is a financially motivated ransomware-as-a-service (RaaS) operation that emerged in ...
3048 incidentes RU
Jul 2026
threat-actor
Play is a ransomware group that has been active since at least 2022 deploying Playcrypt ra...
2536 incidentes Russia
Jul 2026
threat-actor
Clop, also known as Cl0p, is a financially motivated cybercriminal organization that emerg...
2508 incidentes RU
Jun 2026
threat-actor
LockBit 3.0, also known as LockBit Black, is a financially motivated cybercriminal group t...
2016 incidentes RU
Jun 2026
threat-actor
LockBit 3.0, known also as LockBit Black, first surfaced in June 2022 as a significant evo...
2016 incidentes RU
Jun 2026
threat-actor
1933 incidentes Russia
ransomware
DragonForce is a financially motivated ransomware-as-a-service (RaaS) group that emerged i...
1740 incidentes MY
Jul 2026
threat-actor
RansomHub is a financially motivated ransomware-as-a-service (RaaS) operation that first e...
1684 incidentes RU
Jun 2026
threat-actor
1524 incidentes Russia
threat-actor
The Gentlemen is a financially motivated ransomware group that first emerged in mid-2025 a...
1512 incidentes RU
Jul 2026
apt
Gnosticplayers is a financially motivated cybercriminal entity that emerged in early 2019,...
1268 incidentes PK
ransomware
Play Ransomware is a financially motivated cybercriminal group that emerged in June 2022. ...
1268 incidentes RU
threat-actor
PlayBoy Locker is a ransomware-as-a-service (RaaS) operation that first emerged in Septemb...
1268 incidentes NL
Jun 2026
threat-actor
Cyclops emerged in May 2023 as a Ransomware-as-a-Service (RaaS) operation, notably develop...
1254 incidentes RU
Jun 2026
threat-actor
Black Basta is a financially motivated ransomware-as-a-service (RaaS) group that emerged i...
1046 incidentes RU
Jun 2026
threat-actor
LockBit 2.0 is a financially motivated cybercriminal ransomware-as-a-service (RaaS) operat...
1002 incidentes RU
Jun 2026
842 incidentes Russia
Jul 2026
threat-actor
ALPHV, also known as BlackCat or Noberus, is a financially motivated, Russian-speaking ran...
731 incidentes RU
Jun 2026
ransomware
BlackCat, also known as ALPHV or Noberus, emerged in mid-November 2021 as a sophisticated ...
731 incidentes RU
Jun 2026
threat-actor
Conti was a Russia-based ransomware-as-a-service (RaaS) operation that emerged in December...
702 incidentes RU
Jun 2026
ransomware
PYSA is a human-operated ransomware group that emerged in October 2019, also known by the ...
618 incidentes FR
Jun 2026
ransomware
Hunters emerged in early 2021 as a ransomware group focusing on high-profile targets acros...
614 incidentes RU
Jun 2026
threat-actor
Alianza ofensiva de Scattered Spider, LAPSUS$ y ShinyHunters. Social engineering (vishing)...
614 incidentes 1 paises
Financially motivated S:4 Jul 2026
threat-actor
NightSpire is a financially driven ransomware group that first appeared in February 2025, ...
590 incidentes KR
Jul 2026
apt
Ice Fog is a cyber espionage group, also tracked under aliases such as DAGGER PANDA, Red F...
567 incidentes CN
Information theft and espionage Jul 2026
ransomware
ViceSociety is a financially motivated ransomware group that emerged in the summer of 2021...
564 incidentes Unknown
Jul 2026
threat-actor
BianLian is a financially motivated cybercriminal group that originated as an Android bank...
552 incidentes RU
Jun 2026
threat-actor
Sinobi is a financially motivated ransomware group that emerged in mid-2025, operating und...
548 incidentes RU
Jun 2026
apt
Coinbase Cartel is a cybercriminal group that emerged in September 2025, distinguishing it...
531 incidentes null
Jul 2026
threat-actor
Medusa is a financially motivated ransomware group that first emerged in June 2021 as a cl...
517 incidentes RU
Jul 2026
threat-actor
Medusa Group has been active since at least 2021 and was initially operated as a closed ra...
517 incidentes Russia
May 2026
threat-actor
517 incidentes Russia
Jul 2026
threat-actor
504 incidentes 0 paises
apt
Safe is an advanced persistent threat group first observed in 2013, assessed with high con...
502 incidentes CN
Information theft and espionage
threat-actor
SafePay is a financially motivated ransomware group that first emerged in September 2024. ...
502 incidentes RU
Jul 2026
threat-actor
8base is a financially motivated ransomware group that first emerged in March 2022, initia...
455 incidentes RU
Jun 2026
threat-actor
Hive emerged in June 2021 as a Ransomware-as-a-Service (RaaS) operation, rapidly gaining p...
416 incidentes RU
Jun 2026
apt
Cosmic Lynx is a financially motivated Russian cybercriminal organization that emerged in ...
414 incidentes RU
414 incidentes 1 paises
Jul 2026
threat-actor
Lynx ransomware emerged in July 2024, operating as a Ransomware-as-a-Service (RaaS) platfo...
414 incidentes RU
Jun 2026
ransomware
RansomHouse is a cybercrime operation that emerged in late 2021, initially distinguishing ...
396 incidentes RU
Jul 2026
threat-actor
Everest is a financially motivated ransomware collective that emerged in late 2020, initia...
365 incidentes RU
Jun 2026
threat-actor
Babuk is a ransomware group that emerged in December 2020, quickly adopting a ransomware-a...
360 incidentes RU
Jun 2026
threat-actor
Dispossessor, also known as Radar, emerged as a cybercrime group in August 2023, initially...
344 incidentes US
Jun 2026
threat-actor
Cloak is a financially motivated ransomware group that emerged in late 2022, distinguishin...
332 incidentes RU
Jun 2026
apt
Night Hunters is an Indian hacktivist group that first appeared in July 2023, commencing a...
307 incidentes IN
threat-actor
ShinyHunters is a financially motivated cybercriminal group first appearing in 2019, gaini...
307 incidentes US
Jul 2026
ransomware
BlackByte is a financially motivated ransomware-as-a-service (RaaS) operation that first e...
294 incidentes RU
Jul 2026
threat-actor
292 incidentes 37 paises
Jul 2026
threat-actor
Avaddon was a ransomware group that emerged in early 2019, transitioning to a Ransomware-a...
292 incidentes RU
Jun 2026
ransomware
Snatch is a ransomware-as-a-service (RaaS) operation that first emerged in 2018, evolving ...
284 incidentes AD
Jul 2026
threat-actor
281 incidentes 0 paises
threat-actor
KillSec is a financially motivated cybercriminal group that emerged in October 2023, trans...
281 incidentes RU
Jun 2026
threat-actor
278 incidentes 0 paises
ransomware
LockBit 5.0, also identified by the internal codename "ChuongDong," is the latest iteratio...
278 incidentes RU
Jun 2026
threat-actor
Rhysida is a financially motivated ransomware-as-a-service (RaaS) group that emerged in ea...
273 incidentes RU
Jun 2026
threat-actor
Cactus is a ransomware-as-a-service (RaaS) operation that emerged in March 2023, primarily...
248 incidentes MY
Jun 2026