Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.

All CTI Cybercrime Dark Web

KELA Cybercrime Update: September 2025 Snapshot

October 21, 2025

KELA Cybercrime Update: September 2025 Snapshot KELA tracks September 2025 dark web trends—hacktivist attacks, data leaks, and new Android and macOS cybercrime tools.

a person sitting in front of a laptop computer

October 10, 2025

Espionage Exposed: Inside a North Korean Remote Worker Network Thousands of North Korean IT workers are operating under fake identities in the global freelance economy, securing jobs at major companies to fund state weapons programs and conduct espionage.

Preventing Medusa Ransomware: A Step-by-Step Security Checklist

September 5, 2025

Preventing Medusa Ransomware: A Step-by-Step Security Checklist Medusa ransomware uses aggressive extortion and rapid attack methods to hit critical industries. This blog explains their tactics and shows how KELA Cyber can help you stay one step ahead.

From XXS to DamageLib Cybercrime Communities Iterest

September 4, 2025

XSS Forum After Takedown: DamageLib Emerges The arrest of XSS[.]is admin “Toha” has shaken the cybercrime underground, sparking mistrust and speculation about law enforcement involvement. Many users have migrated to DamageLib, a rising forum wi

a red building with the words warlock's attack on it

August 19, 2025

Warlock’s Attack on Colt Leak Analyzed: Sensitive Files Potentially Exposed The ransomware attack on Colt Technology Services was claimed by the Warlock ransomware group. KELA examined the list of allegedly stolen files published by Warlock.

a close up of a cell phone with the words kela cybercrime update

August 12, 2025

KELA Cybercrime Update: July 2025 Snapshot KELA reveals key cybercrime trends, from pro-Russian hacktivist attacks to advanced payload loaders and active vulnerabilities. This blog series highlights the latest threats shaping the cybercrime la

a red and black background with the words 2013 threat recap

August 11, 2025

2025 Midyear Cyber Threat Recap: Evolving Tactics and Emerging Dangers Cybercrime is surging in 2025, with record ransomware attacks, millions of infostealer infections, and faster vulnerability exploitation. KELA’s Midyear Threat Report outlines the key threats and urge

dark forums chronicles

July 23, 2025

DarkForums Chronicles: A Look into the Forum's Leadership DarkForums, originally launched as "DARK4RMY Forums" in 2022, has skyrocketed in activity, with a 600% surge in activity between April 1 and June 30, 2025. It swiftly absorbed much of BreachForums' us

The group behind the aviation industry attacks - scattered spider

July 8, 2025

Scattered Spider: The Group Behind the Aviation Industry Attacks This blog offers a comprehensive overview of Scattered Spider’s evolution, tactics, victims, and current threat level, drawing from a Scattered Spider Threat Actor Profile, which compiles research an