8 APT groups, ransomware operators, and cybercrime organizations tracked.
PRC-linked actor living off the land in US critical infrastructure, focusing on communications and energy sectors.
Organized cybercrime syndicate targeting retail and hospitality with custom backdoors and point-of-sale malware.
Rust-based ransomware group using triple extortion tactics against critical infrastructure and legal firms.
Group exploiting zero-day vulnerabilities in file transfer appliances to exfiltrate data before deploying ransomware.
Prolific RaaS operation with automated affiliate model, double extortion, and rapid encryption of enterprise networks.
DPRK-linked group conducting cryptocurrency theft, SWIFT banking attacks, and destructive wiper operations.
Sophisticated APT known for SolarWinds supply chain intrusion and cloud identity targeting across Western governments.
State-sponsored group targeting government, defense, and media organizations with spear-phishing and credential theft campaigns.