Posts About Threat Actor Spotlight | KELA Cyber

Upcoming Webinar / Breached By Association - Outsmarting Cyber Risk In Your Supply Chain

Read more

Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTIThreat Actor SpotlightDark Web
Preventing Medusa Ransomware: A Step-by-Step Security Checklist
Threat Actor Spotlight

September 5, 2025

Preventing Medusa Ransomware: A Step-by-Step Security ChecklistMedusa ransomware uses aggressive extortion and rapid attack methods to hit critical industries. This blog explains their tactics and shows how KELA Cyber can help you stay one step ahead.
From XXS to DamageLib Cybercrime Communities Iterest
Threat Actor Spotlight

September 4, 2025

XSS Forum After Takedown: DamageLib EmergesThe arrest of XSS[.]is admin “Toha” has shaken the cybercrime underground, sparking mistrust and speculation about law enforcement involvement. Many users have migrated to DamageLib, a rising forum wi
a magnifying glass with the words infosteler unmasker turning digital
Threat Actor Spotlight

August 26, 2025

Infostealer Unmasker: Turning Digital Traces into Real World IdentitiesInfostealers collect far more than passwords and cookies, they can expose entire criminal networks. By aggregating and analyzing stolen logs, hidden identities of hackers, fraudsters, and crypto owner
Who Is the Qilin Ransomware Group
Threat Actor Spotlight

August 25, 2025

Who Is the Qilin Ransomware Group and How Do They Operate?Qilin ransomware attacks are a growing threat, with high-profile incidents and sophisticated tactics. This post breaks down how the group operates, recent breaches linked to them, and what practical s
Warlock’s Attack on Colt Leak Analyzed
Threat Actor Spotlight

August 19, 2025

Warlock’s Attack on Colt Leak Analyzed: Sensitive Files Potentially ExposedThe ransomware attack on Colt Technology Services was claimed by the Warlock ransomware group. KELA examined the list of allegedly stolen files published by Warlock.
a close up of a cell phone with the words kela cybercrime update
Threat Actor Spotlight

August 12, 2025

KELA Cybercrime Update: July 2025 SnapshotKELA reveals key cybercrime trends, from pro-Russian hacktivist attacks to advanced payload loaders and active vulnerabilities. This blog series highlights the latest threats shaping the cybercrime la
a red and black background with the words 2013 threat recap
Threat Actor Spotlight

August 11, 2025

2025 Midyear Cyber Threat Recap: Evolving Tactics and Emerging DangersCybercrime is surging in 2025, with record ransomware attacks, millions of infostealer infections, and faster vulnerability exploitation. KELA’s Midyear Threat Report outlines the key threats and urge
dark forums chronicles
Threat Actor Spotlight

July 30, 2025

DarkForums Chronicles: A Look into the Forum's Leadership DarkForums, originally launched as "DARK4RMY Forums" in 2022, has skyrocketed in activity, with a 600% surge in activity between April 1 and June 30, 2025. It swiftly absorbed much of BreachForums' us
The group behind the aviation industry attacks - scattered spider
Threat Actor Spotlight

July 8, 2025

Scattered Spider: The Group Behind the Aviation Industry AttacksThis blog offers a comprehensive overview of Scattered Spider’s evolution, tactics, victims, and current threat level, drawing from a Scattered Spider Threat Actor Profile, which compiles research an