https://www.securitymagazine.com/articles/94334-mimecast-compromised-by-a-threat-actor
Mimecast compromised by a threat actor | 2021-01-13 | Security Magazine
A Mimecast-issued certificate provided to certain customers to authenticate Mimecast Sync and Recover, Continuity Monitor, and IEP products to Microsoft 365...
by athreat actormimecastcompromisedsecurity
https://abnormal.ai/threat-intelligence/digest/threat-actor-impersonates-executive-uses-fabricated-email-thread-attempt-payment-fraud
Threat Actor Impersonates Executive and Uses Fabricated Email Thread to Attempt Payment Fraud |...
An attacker creates a fake conversation between a vendor and an executive to make it appear that the executive is authorizing an ACH payment for an outstanding...
threat actorimpersonatesexecutiveusesfabricated
https://www.precursorintelligence.com/threat-actors/operation-red-signature
Operation Red Signature Threat Actor Profile | Precursor Intelligence
The threat actors compromised the update server of a remote support solutions provider to deliver a remote access tool called 9002 RAT to their target...
threat actoroperationredsignatureprofile
https://malpedia.caad.fkie.fraunhofer.de/actor/water_gamayun
Water Gamayun (Threat Actor)
Water Gamayun exploits the MSC EvilTwin zero-day vulnerability to compromise systems and exfiltrate data, utilizing custom payloads and advanced data...
threat actorwatergamayun
https://www.stormsec.co.uk/post/unc961-three-encounters-with-a-financially-motivated-threat-actor
UNC961: Three Encounters with a Financially Motivated Threat Actor
Mar 24, 2023 - Web application vulnerabilities are like doorways: you never know who or what will walk through. Between December 2021 and July 2022, the Mandiant Managed...
three encounterswith athreat actorfinanciallymotivated
https://malpedia.caad.fkie.fraunhofer.de/actor/songxy
SongXY (Threat Actor)
SongXY is a Chinese APT group that employs phishing tactics to initiate cyberespionage campaigns. They utilize the Royal Road RTF builder, exploiting the...
threat actor
https://cyberpress.org/selling-jollibee-dark-web/
Threat Actor Claims to be Selling Jollibee Data on Dark Web
Jan 27, 2025 - The alleged breach has gained attention through a social media post from the account Dark Web Informer, which monitors cybercrime activities.
threat actordark webclaimssellingjollibee
Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10
Best Live Sex Cam Shows with Free Live Chat | XLoveCam
Watch thousands of cam girls get naked on XLoveCam.
https://blog.glazer.ee/tags/threat-actor/
Threat Actor · Glazer Blog
Glazer Blog: Get latest insights and best practises on cybercrime investigations, due-diligence workflows, intelligence collection and building with Glazer...
threat actorglazerblog
https://www.cyberexchange.uk.net/news/new-news-2/
Interested in threat actor profiling, playbook development, tooling, and post-incident review...
Interested in threat actor profiling, playbook development, tooling, and post-incident review frameworks?
interested inthreat actorprofilingplaybookdevelopment
https://www.proofpoint.com/uk/blog/threat-insight/new-threat-actor-uses-spanish-language-lures-distribute-seldom-observed-bandook
New Threat Actor Uses Spanish Language Lures to Distribute Seldom Observed Bandook Malware |...
Apr 12, 2023 - Key Findings Proofpoint researchers identified a new group, TA2721 distributing Spanish-language email threats. The group often targets individuals with...
threat actorspanish languagenewuseslures
https://www.precursorintelligence.com/threat-actors/ghost-jackal
Ghost Jackal Threat Actor Profile | Precursor Intelligence
Threat intelligence profile for Ghost Jackal. Discover TTPs, targeted industries, and known victims.
threat actorghostjackalprofileprecursor
https://hunt.io/threat-actors
Threat Actor Profiles - APT Groups, Ransomware & Cybercrime Infrastructure
Track threat actors by infrastructure, TTPs, and IOCs. Hunt.io's threat actor profiles cover APT groups, ransomware operators, and cybercrime clusters with...
threat actorprofilesaptgroupsransomware
https://securityintelhub.com/threat-actors/medusa
Medusa — Threat Actor Profile, TTPs & IOCs | Security Intel Hub
Ransomware group operating a leak site with countdown timers. Targets healthcare and education with increasing sophistication. Offers data deletion for...
threat actormedusaprofilettpsiocs
https://blackkite.com/platform/threat-actor-monitoring
Threat Actor Monitoring for Vendor Ecosystems | Black Kite
See where cyber criminals are likely to strike. Our Adversary Susceptibility Index maps specific threat actors to your vendor ecosystem for proactive defense.
threat actorblack kitemonitoringvendorecosystems
https://www.thatischina.com/china-in-a-worldwide-espionage-operation-hack-even-friendly-countries/
Chinese-speaking threat actor SneakyChef Asia EMEA Middle East Africa SugarGh0st malware Cisco Talos
Jun 22, 2024 - A previously unidentified Chinese-speaking threat actor known as SneakyChef has […]
chinese speakingthreat actormiddle eastcisco talosasia
https://malpedia.caad.fkie.fraunhofer.de/actor/earth_naga
Earth Naga (Threat Actor)
Earth Naga is an APT group that has persistently targeted high-value organizations, including government agencies, telecommunications, and military-related...
threat actorearthnaga
https://darkwebinformer.com/a-threat-actor-allegedly-leaked-data-of-tradingview/
A Threat Actor Allegedly Leaked Data of TradingView
Sep 4, 2025 - A Threat Actor Allegedly Leaked Data of TradingView
threat actorallegedlyleakeddatatradingview
https://www.obscureiq.com/threat-actors/fe0dor
fe0dor — Threat Actor Profile | ObscureIQ
threat actorprofile
https://darkwebinformer.com/a-threat-actor-claims-to-have-leaked-the-turkey-gsm-database/
A Threat Actor Claims to have Leaked the Turkey GSM Database
Sep 4, 2025 - A Threat Actor Claims to have Leaked the Turkey GSM Database
threat actorthe turkeyclaimsleakedgsm
Sponsored https://www.litlatinz.com/enter.php?prg=1&id=robuta&t=best&ad_id=litlatinz_315x300_phoneswap1.gif
LitLatinz
Date with some spice. Join for free to meet sexy local Latinas.
https://www.zscaler.com/it/zpedia/what-is-a-threat-actor
Threat actor: significato, tipologie ed esempi | Zscaler
Scopri cosa significa threat actor, quali tipi di aggressori informatici esistono, le loro motivazioni e le tecniche utilizzate per colpire le aziende. Scopri...
threat actorsignificatotipologieesempizscaler
https://impreza.host/russian-threat-actor-coldriver-evolves-tactics-with-clickfix-style-exploits/
Threat Actor COLDRIVER Evolves Tactics with ClickFix Exploits | Impreza Host
Jul 15, 2026 - COLDRIVER group launched a round of ClickFix-style attacks, delivering two new malware families tracked as BAITSWITCH and SIMPLEFIX.
threat actorevolvestacticsclickfixexploits
https://malpedia.caad.fkie.fraunhofer.de/actor/threatsec
Threatsec (Threat Actor)
ThreatSec is a hacktivist group that has targeted various organizations, including internet service providers in Gaza. They claim to fight for the rights and...
threat actor
https://www.cyber-defence.io/insights/scattered-spider-octo-tempest-threat-actor-profile
Scattered Spider (Octo Tempest) – Threat Actor Profile | UK Cyber…
Sep 13, 2026 - Threat profile of Scattered Spider (Octo Tempest): helpdesk social engineering, SIM swapping and ransomware deployment against large enterprises.
scattered spiderocto tempestthreat actorprofile
https://iranianthreatactors.com/seyed-mohammad-kalami
SEYED MOHAMMAD KALAMI - Iranian Cyber Threat Actor
Worked in network security and penetration testing.
cyber threatseyedmohammadkalamiiranian
https://darkwebinformer.com/a-threat-actor-has-allegedly-leaked-data-of-reniec/
A Threat Actor has Allegedly Leaked Data of RENIEC
Sep 4, 2025 - A Threat Actor has Allegedly Leaked Data of RENIEC
threat actorallegedlyleakeddatareniec
Sponsored https://www.camsoda.ai/?id=robuta&ad_id=ai_300x250_06
Camsoda AI: AI Girlfriend App for Chatting, Photos, and Voice
Camsoda AI is the AI girlfriend app for real-time chat, photos, and voice. Pick from 200+ characters or create your own. Free to start.
https://abnormal.ai/threat-intelligence/digest/threat-actor-convincingly-impersonates-employee-requesting-direct-deposit-update-in-likely-ai-generated-attack
Threat Actor Convincingly Impersonates Employee Requesting Direct Deposit Update in Likely...
The attacker uses a Gmail account to send an email free of grammatical errors and with no malicious payloads to attempt payroll diversion.
threat actordirect depositconvincinglyimpersonatesemployee
https://newsyorknet.com/ai-assisted-threat-actor-compromises-600-fortigate-devices-in-55-countries/
AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries - newsyorknet.com
Feb 21, 2026 - A Russian-speaking, financially motivated threat actor has been observed leveraging commercial generative artificial intelligence (AI) services to compromise
ai assistedthreat actorcompromisesfortigatedevices
https://securitybrief.news/story/ta585-identified-as-key-threat-actor-using-advanced-malware-tools
TA585 identified as key threat actor using advanced malware tools
Proofpoint identifies TA585 as a cyber threat actor managing end-to-end attacks, deploying advanced malware like MonsterV2 to target finance firms globally.
threat actoridentifiedkeyusingadvanced
https://www.coalitioninc.com/blog/security-labs/security-alert-volt-typhoon
Security Alert: What to Know About Threat Actor Volt Typhoon
Microsoft and CISA warned that the Chinese APT Volt Typhoon is targeting critical infrastructure by living off the land. Learn the risks of this technique.
what to knowsecurity alertthreat actorvolt typhoon
https://malpedia.caad.fkie.fraunhofer.de/actor/javaghost
JavaGhost (Threat Actor)
JavaGhost is a threat actor group that has targeted cloud environments, particularly AWS, for phishing campaigns without engaging in data theft for extortion....
threat actor
https://www.precursorintelligence.com/threat-actors/apt9
APT9 Threat Actor Profile | Precursor Intelligence
APT9 engages in cyber operations where the goal is data theft, usually focusing on the data and projects that make a particular organization competiti...
threat actorprofileprecursorintelligence
https://darkwebinformer.com/a-threat-actor-is-allegedly-selling-vpn-access-to-an-unidentified-usa-company-with-a-revenue-of-5-billion/
A Threat Actor is Allegedly Selling VPN Access to an Unidentified USA Company with a Revenue of $5...
Sep 4, 2025 - A Threat Actor is Allegedly Selling VPN Access to an Unidentified USA Company with a Revenue of $5 Billion
threat actorallegedlysellingvpnaccess
https://typhooncon.com/blog/conitems/riding-with-the-chollimas/
Riding with the Chollimas: our 100 day quest to profile a North Korean state sponsored threat actor...
north korean stateriding withthreat actordayquest
https://tornews.com/news/cyber-threats/bolivia-government-gitlab-admin-access-sale/
Threat Actor Claims to Sell Admin Access to Bolivian Government GitLab for $1,000 - TorNews
Jun 11, 2026 - Threat actor claims to be selling admin access to a Bolivian government GitLab instance for $1,000, raising concerns over potential unauthorized access to...
threat actorbolivian governmentclaimsselladmin
https://darkwebinformer.com/a-threat-actor-claims-to-have-leaked-the-data-of-general-directorate-of-education-in-baghdad-governorate-third-rusafa/
A Threat Actor Claims to have Leaked the Data of General Directorate of Education in Baghdad...
Sep 4, 2025 - A Threat Actor Claims to have Leaked the Data of General Directorate of Education in Baghdad Governorate, Third Rusafa
education in baghdadthreat actorthe dataclaimsleaked
https://darkwebinformer.com/a-threat-actor-claims-to-be-selling-access-to-an-unidentified-thailand-telecom-organization/
A Threat Actor Claims to be Selling Access to an Unidentified Thailand Telecom Organization
Sep 4, 2025 - A Threat Actor Claims to be Selling Access to an Unidentified Thailand Telecom Organization
threat actorclaimssellingaccessunidentified
https://www.latesthackingupdates.com/tag/threat-actor-selling-new-atomic-macos-amos-stealer/
Threat Actor Selling New Atomic macOS (AMOS) Stealer - Latest Hacking Updates
threat actorsellingnewatomicmacos
Sponsored https://www.sassyseniors.com/enter.php?prg=1&id=robuta&t=best&ad_id=sass_315x300_splitlsblondeass.jpg
Sassy Seniors - The best passionate personals for 50 plus dating
Intimate dating for sexy local seniors.
https://www.argusprotects.com/cyberpedia-threat-actor
CyberPedia: Threat Actor | Argus
threat actorcyberpediaargus
https://malpedia.caad.fkie.fraunhofer.de/actor/apt73
APT73 (Threat Actor)
APT73 is a ransomware group that has publicly identified 12 victims and launched its data leak site on April 25th. The DLS bears a striking resemblance to that...
threat actor
Sponsored https://www.camsoda.com/?id=robuta&ad_id=300x250_6.gif
Free Live Sex Cams, Cam Girls, Adult Chat, and Pornstar Cams | Camsoda
Join Camsoda for the hottest live cam girls! Free HD webcam shows, private sessions, and real-time chat with sexy models. Watch live now and enjoy!
https://www.precursorintelligence.com/threat-actors/powerpool
PowerPool Threat Actor Profile | Precursor Intelligence
Malware developers have started to use the zero-day exploit for Task Scheduler component in Windows, two days after proof-of-concept code for the vuln...
threat actorprofileprecursorintelligence
https://darkwebinformer.com/a-threat-actor-claims-to-be-selling-vpn-access-to-argentina-government/
A Threat Actor Claims to be Selling VPN Access to Argentina Government
Sep 4, 2025 - A Threat Actor Claims to be Selling VPN Access to Argentina Government
threat actorclaimssellingvpnaccess
https://malpedia.caad.fkie.fraunhofer.de/actor/ta578
TA578 (Threat Actor)
TA578, a threat actor that Proofpoint researchers have been tracking since May of 2020. TA578 has previously been observed in email-based campaigns delivering...
threat actor
https://thecyberwire.com/newsletters/policy-briefing/4/38
Commerce and DHS report on the ICT supply chain. Iranian threat actor MuddyWater resurfaces with a...
Commerce and DHS report on the ICT supply chain. Iranian threat actor MuddyWater resurfaces with a major cyberespionage campaign.
on thesupply chainthreat actorcommercedhs
https://thecyberwire.com/newsletters/daily-briefing/15/61
North Korean threat actor compromises axios npm package.
Cisco hit by cyberattack following Trivy compromise, Business news: Airbus to acquire Ultra Cyber.
north koreanthreat actornpm packagecompromisesaxios
https://darkwebinformer.com/a-threat-actor-is-selling-access-to-an-unidentified-organisation-in-sweden/
A Threat Actor is Selling Access to an Unidentified Organisation in Sweden
Sep 4, 2025 - A Threat Actor is Selling Access to an Unidentified Organisation in Sweden
threat actorin swedensellingaccessunidentified
https://onionwiki.com/news/wickr-enterprise-aws-admin-access-claim/
Threat Actor Claims Access to Wickr Enterprise Admin Systems Hosted on AWS - OnionWiki
Jun 11, 2026 - Threat actor claims to have gained access to Wickr Enterprise admin systems hosted on AWS, raising concerns over potential exposure of secure communications...
threat actorclaimsaccesswickrenterprise
https://darkwebinformer.com/a-threat-actor-claims-to-be-selling-uk-government-email-accounts/
A Threat Actor Claims to be Selling UK Government Email Accounts
Sep 4, 2025 - A Threat Actor Claims to be Selling UK Government Email Accounts
threat actoruk governmentemail accountsclaimsselling
https://www.s-rminform.com/s-rm-scattered-spider-briefing
Threat actor in focus | Scattered Spider
Learn about the threat group Scattered Spider, the criminal gang behind the attacks on UK retailers including Marks and Spencer and Co-op
threat actorin focusscattered spider
https://cubexgroup.com/rss_feeds/microsoft-and-crowdstrike-launch-shared-threat-actor-glossary-to-cut-attribution-confusion/
Microsoft and CrowdStrike Launch Shared Threat Actor Glossary to Cut Attribution Confusion -...
Read More Microsoft and CrowdStrike have announced that they are teaming up to align their individual threat actor taxonomies by publishing a new joint threat...
threat actormicrosoftcrowdstrikelaunchshared
https://bulwarkblack.com/the-updated-apt-playbook-tales-from-the-kimsuky-threat-actor-group/
The Updated APT Playbook: Tales from the Kimsuky threat actor group, Bulwark Black
Mar 22, 2024 - Last updated at Thu, 21 Mar 2024 13:20:04 GMT Co-authors are Christiaan Beek and Raj Samani Within Rapid7 Labs we continually track and monitor threat…
threat actorupdatedaptplaybooktales
https://malpedia.caad.fkie.fraunhofer.de/actor/ta800
TA800 (Threat Actor)
This attacker is an affiliate distributor of the The Trick, also known as Trickbot, and BazaLoader. (For more on how affiliates work, see the description of...
threat actor
https://matkowsky.com/answers/legal-process-threat-actor-attribution
How Can Legal Process Advance Threat-Actor Attribution?
How lawful legal process can complement public and technical threat intelligence by obtaining nonpublic evidence relevant to infrastructure attribution.
legal processthreat actoradvanceattribution
https://darkwebinformer.com/a-threat-actor-claims-to-have-leaked-data-of-french-citizens/
A Threat Actor Claims to have Leaked Data of French Citizens
Sep 4, 2025 - A Threat Actor Claims to have Leaked Data of French Citizens
threat actorfrench citizensclaimsleakeddata
https://www.redsheepsec.com/tracker/threat-actors/mitre_g0059
Threat Actor Database | RedSheep Security
threat actordatabasesecurity
https://malpedia.caad.fkie.fraunhofer.de/actor/buhtrap
BuhTrap (Threat Actor)
Buhtrap has been active since 2014, however their first attacks against financial institutions were only detected in August 2015. Earlier, the group had only...
threat actor
https://fortgale.com/en/cti-threat-actor-profiling/
Threat Actor Profiling · Attack Attribution | Fortgale CTI
Know who is attacking, not just what. Technical attribution of phishing, malware and cloud attacks. Threat actor profiling from the Fortgale CTI team.
threat actorprofilingattackattributioncti
https://darkwebinformer.com/a-threat-actor-is-allegedly-selling-access-to-pazomat-of-paz-oil-company-ltd/
A Threat Actor is Allegedly Selling Access to Pazomat - Of Paz Oil Company LTD
Sep 4, 2025 - A Threat Actor is Allegedly Selling Access to Pazomat - Of Paz Oil Company LTD
paz oil companythreat actorallegedlysellingaccess
https://darkwebinformer.com/a-threat-actor-has-allegedly-leaked-data-of-kickex/
A Threat Actor has Allegedly Leaked Data of KickEX
Sep 4, 2025 - A Threat Actor has Allegedly Leaked Data of KickEX
threat actorallegedlyleakeddata
https://malpedia.caad.fkie.fraunhofer.de/actor/uat-11795
UAT-11795 (Threat Actor)
UAT-11795 is a sophisticated, Russian-speaking, financially motivated adversary conducting malicious campaigns targeting users in the U.S. and Europe since...
threat actoruat
https://darkwebinformer.com/a-threat-actor-claims-to-be-selling-private-source-code-of-glock-bot/
A Threat Actor Claims to be Selling Private Source Code of Glock Bot
Sep 4, 2025 - A Threat Actor Claims to be Selling Private Source Code of Glock Bot
threat actorsource codeclaimssellingprivate
https://darkwebinformer.com/a-threat-actor-allegedly-has-leaked-the-flipside-forum-database/
A Threat Actor Allegedly has Leaked The FLipside Forum Database
Sep 4, 2025 - A Threat Actor Allegedly has Leaked The FLipside Forum Database
threat actorthe flipsideallegedlyleakedforum
https://darkwebinformer.com/a-threat-actor-claims-to-have-leaked-the-data-of-grace-digital/
A Threat Actor Claims to have Leaked the Data of Grace Digital
Sep 4, 2025 - A Threat Actor Claims to have Leaked the Data of Grace Digital
threat actorthe datagrace digitalclaimsleaked
https://www.cybersecuritydive.com/news/microsoft-nobelium-credential-stealing/607294/
Microsoft warns of new credential-stealing backdoor from SolarWinds threat actor | Cybersecurity...
The newly identified malware, called FoggyWeb, has been observed since April and is used to steal from compromised AD FS servers.
of newthreat actormicrosoftwarnscredential
https://infosec.ge/blog/uat-10147-agentic-ai-intrusions/
UAT-10147: When the threat actor's AI does the post-compromise work | Infosec.ge
Aug 26, 2026 - Cisco Talos has documented UAT-10147, a Chinese-speaking threat group that uses agentic AI to run post-compromise operations at scale: reconnaissance, payload...
the threatuatactorpostcompromise
https://m4ttblack.substack.com/p/mapping-the-modern-adversary
Mapping the Modern Adversary: How MITRE ATT&CK Powers Threat Actor Profiling
the modernthreat actormappingadversarymitre
https://www.huntandhackett.com/threats/actors/apt38
Threat actor profile: Lazarus | Hunt & Hackett
Explore the motivations and tactics of the Lazarus Group, the infamous North Korean threat actor behind some of the world's most high-profile attacks.
threat actorprofilelazarushunthackett
https://darkwebinformer.com/a-threat-actor-is-allegedly-selling-data-of-direktorat-jenderal-pajak/
A Threat Actor is Allegedly Selling Data of Direktorat Jenderal Pajak
Sep 4, 2025 - A Threat Actor is Allegedly Selling Data of Direktorat Jenderal Pajak
direktorat jenderal pajakthreat actorallegedlysellingdata
https://strobes.co/vi/threat-actors/FIN7/
FIN7 - Threat Actor Profile & Exploited CVEs | Strobes VI | Strobes VI
Groups targeting financial organizations or people with significant financial assets.
threat actorprofileexploitedcvesstrobes
https://artthreat.net/5132-40491-megan-stalter-debuts-dramatic-platinum-blonde-hair-at-actor-awards/
Megan Stalter debuts dramatic platinum blonde hair at Actor Awards - Art Threat
Mar 2, 2026 - Megan Stalter shocked everyone with a dramatic platinum blonde transformation on the 2026 Actor Awards red carpet. The Hacks actress traded her signature dark...
platinum blonde hairmegan stalteractor awardsdebutsdramatic
https://artthreat.net/5135-28672-noah-wyle-sweeps-awards-after-golden-globe-win-shines-at-actor-awards/
Noah Wyle sweeps awards after Golden Globe win, shines at Actor Awards - Art Threat
Mar 2, 2026 - Noah Wyle is having an extraordinary awards season. The 54-year-old actor swept major ceremonies in just two months, cementing his comeback with an...
noah wylegolden globesweepsawardswin
https://apt.etda.or.th/cgi-bin/showcard.cgi?g=Shark%20Spider&n=1
Shark Spider - Threat Group Cards: A Threat Actor Encyclopedia
sharkspiderthreatgroupcards
Sponsored https://www.tradenudes.com/enter.php?prg=1&id=robuta&t=best&ad_id=tradenudes_315x300_1.jpg
Trade Nudes for Free at TradeNudes
Are you looking for someone to trade nudes with? Sext and other fun flirting! No face required. Come join the fun at TradeNudes.com.
Sponsored https://ctwmsg.com/?siteId=jasmin&cobrandId=&superCategoryName=&categoryName=girl&pageName=listpage&prm[psid]=robuta&prm[pstool]=211_3&prm[psprogram]=pps&prm[campaign_id]=&subAffId=
Live Sex Cams and Adult Chat with Webcam Girls | LiveJasmin
Chat for free on LiveJasmin and watch HD Live Sex cam shows! 2000+ Models are waiting for You, no registration required.
https://threatintel.cc/2025/05/09/a-closer-look-at-plugvalley.html
Threat Intel - A Closer Look At PlugValley: Threat Actor Profile PlugValley, a threat …
A Closer Look At PlugValley: Threat Actor Profile PlugValley, a threat actor group, offers AI-powered vishing-as-a-service, including spoofing, customizable …
a closer lookthreat intelactorprofile