Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.

All Cloud Security Cybersecurity Cyber Threat Intelligence

a black background with red and white text that says, belsen group & zero

Threat Actor Spotlight

March 10, 2025

Could The Belsen Group Be Associated With ZeroSevenGroup?KELA explores a possible link between the Belsen Group and ZeroSevenGroup, two cybercriminal entities with ties to Yemen. The Belsen Group surfaced in January 2025, leaking Fortinet data and selling n

a black background with a skull on it

Threat Actor Spotlight

March 7, 2025

Black Basta Leak: New Findings Reveal Victim Details Last week, we issued a new report on Black Basta’s leak exposing their inner workings. As expected, since publishing our report, KELA’s Cyber Intelligence Center has new information and analysis on t

a skull with the words, inside the black boston leak how ransomware operators gain

Threat Actor Spotlight

February 27, 2025

Inside the Black Basta Leak: How Ransomware Operators Gain Access A major leak has exposed the inner workings of Black Basta, one of the most active כransomware groups, offering a rare glimpse into how these cybercriminals infiltrate and exploit their victims. KELA

an image of a robot with text that reads anubis a new ransomware

Threat Actor Spotlight

February 25, 2025

Anubis: A New Ransomware Threat Recently, a new ransomware group, dubbed Anubis, emerged. Their official X (formerly known as Twitter) profile suggests they have been active since the beginning of December 2024. At the time of writi

a person in a hooded jacket typing on a laptop

Threat Actor Spotlight

February 10, 2025

No, OpenAI Wasn’t Breached—The Real Threat Comes from Infostealers On February 6, 2025, the threat actor “emirking” posted on BreachForums they allegedly have access to “over 20 million account access codes in OpenAI.” The actor offered to BreachForums’ users to reac

a person sitting in front of a computer on a desk

Threat Actor Spotlight

January 27, 2025

Is GDLockerSec Really Targeting AWS?Background In January 2025, a new alleged ransomware group named GDLockerSec emerged, sharing details of a few victims on their website. Interestingly, the group made the bold claim of targeting a hig