Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.

All CTI Cybercrime Dark Web

Hellcat Hacking Unmasked

November 27, 2025

UPDATE - Hellcat Hacking Group Unmasked: Investigating Rey and Pryx KELA reveals the real identities behind Rey and Pryx, the key players driving Hellcat’s cybercrime operations. From high-profile data breaches to controversial online activities, our investigation unc

a man dressed as santa claus carrying a sack of gifts

November 4, 2025

4 Holiday Shopping Scams Businesses Must Watch This Season Holiday shopping scams surge during peak sales, from fake websites to phishing and counterfeit vouchers. Awareness and verification are key.

KELA Cybercrime Update: September 2025 Snapshot

October 21, 2025

KELA Cybercrime Update: September 2025 Snapshot KELA tracks September 2025 dark web trends—hacktivist attacks, data leaks, and new Android and macOS cybercrime tools.

a person sitting in front of a laptop computer

October 10, 2025

Espionage Exposed: Inside a North Korean Remote Worker Network Thousands of North Korean IT workers are operating under fake identities in the global freelance economy, securing jobs at major companies to fund state weapons programs and conduct espionage.

Preventing Medusa Ransomware: A Step-by-Step Security Checklist

September 5, 2025

Preventing Medusa Ransomware: A Step-by-Step Security Checklist Medusa ransomware uses aggressive extortion and rapid attack methods to hit critical industries. This blog explains their tactics and shows how KELA Cyber can help you stay one step ahead.

From XXS to DamageLib Cybercrime Communities Iterest

September 4, 2025

XSS Forum After Takedown: DamageLib Emerges The arrest of XSS[.]is admin “Toha” has shaken the cybercrime underground, sparking mistrust and speculation about law enforcement involvement. Many users have migrated to DamageLib, a rising forum wi

a red building with the words warlock's attack on it

August 19, 2025

Warlock’s Attack on Colt Leak Analyzed: Sensitive Files Potentially Exposed The ransomware attack on Colt Technology Services was claimed by the Warlock ransomware group. KELA examined the list of allegedly stolen files published by Warlock.

a close up of a cell phone with the words kela cybercrime update

August 12, 2025

KELA Cybercrime Update: July 2025 Snapshot KELA reveals key cybercrime trends, from pro-Russian hacktivist attacks to advanced payload loaders and active vulnerabilities. This blog series highlights the latest threats shaping the cybercrime la

a red and black background with the words 2013 threat recap

August 11, 2025

2025 Midyear Cyber Threat Recap: Evolving Tactics and Emerging Dangers Cybercrime is surging in 2025, with record ransomware attacks, millions of infostealer infections, and faster vulnerability exploitation. KELA’s Midyear Threat Report outlines the key threats and urge