Posts About Threat Actor Spotlight | KELA Cyber

New / 2025 Midyear Threat Report: Evolving Tactics and Emerging Dangers

Read more

Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTIThreat Actor SpotlightDark Web
Warlock’s Attack on Colt Leak Analyzed
Threat Actor Spotlight

August 19, 2025

Warlock’s Attack on Colt Leak Analyzed: Sensitive Files Potentially ExposedThe ransomware attack on Colt Technology Services was claimed by the Warlock ransomware group. KELA examined the list of allegedly stolen files published by Warlock.
a close up of a cell phone with the words kela cybercrime update
Threat Actor Spotlight

August 12, 2025

KELA Cybercrime Update: July 2025 SnapshotKELA reveals key cybercrime trends, from pro-Russian hacktivist attacks to advanced payload loaders and active vulnerabilities. This blog series highlights the latest threats shaping the cybercrime la
a red and black background with the words 2013 threat recap
Threat Actor Spotlight

August 11, 2025

2025 Midyear Cyber Threat Recap: Evolving Tactics and Emerging DangersCybercrime is surging in 2025, with record ransomware attacks, millions of infostealer infections, and faster vulnerability exploitation. KELA’s Midyear Threat Report outlines the key threats and urge
dark forums chronicles
Threat Actor Spotlight

July 30, 2025

DarkForums Chronicles: A Look into the Forum's Leadership DarkForums, originally launched as "DARK4RMY Forums" in 2022, has skyrocketed in activity, with a 600% surge in activity between April 1 and June 30, 2025. It swiftly absorbed much of BreachForums' us
The group behind the aviation industry attacks - scattered spider
Threat Actor Spotlight

July 8, 2025

Scattered Spider: The Group Behind the Aviation Industry AttacksThis blog offers a comprehensive overview of Scattered Spider’s evolution, tactics, victims, and current threat level, drawing from a Scattered Spider Threat Actor Profile, which compiles research an
Hellcat Hacking Unmasked
Threat Actor Spotlight

March 27, 2025

Hellcat Hacking Group Unmasked: Investigating Rey and PryxKELA reveals the real identities behind Rey and Pryx, the key players driving Hellcat’s cybercrime operations. From high-profile data breaches to controversial online activities, our investigation unc
a black background with red and white text that says, belsen group & zero
Threat Actor Spotlight

March 10, 2025

Could The Belsen Group Be Associated With ZeroSevenGroup?KELA explores a possible link between the Belsen Group and ZeroSevenGroup, two cybercriminal entities with ties to Yemen. The Belsen Group surfaced in January 2025, leaking Fortinet data and selling n
a black background with a skull on it
Threat Actor Spotlight

March 7, 2025

Black Basta Leak: New Findings Reveal Victim DetailsLast week, we issued a new report on Black Basta’s leak exposing their inner workings.  As expected, since publishing our report, KELA’s Cyber Intelligence Center has new information and analysis on t
a skull with the words, inside the black boston leak how ransomware operators gain
Threat Actor Spotlight

February 27, 2025

Inside the Black Basta Leak: How Ransomware Operators Gain AccessA major leak has exposed the inner workings of Black Basta, one of the most active כransomware groups, offering a rare glimpse into how these cybercriminals infiltrate and exploit their victims. KELA