Cybercrime Groups 77 articles

Summary The Akira ransomware group is a cybercriminal organization known for deploying ransomware attacks targeting various industries worldwide. Active since at least 2021, Akira employs advanced encryption techniques to lock…

Summary AlphaBay operators were the administrators and key personnel behind AlphaBay, a large darknet marketplace primarily used for illicit trade including drugs, weapons, and stolen data. The platform operated on…

Summary Avaddon is a ransomware-as-a-service (RaaS) operation that emerged in early 2020, targeting organizations worldwide by encrypting data and demanding ransom payments for decryption keys. It is known for employing…

Summary BianLian is a sophisticated malware strain primarily targeting financial institutions and their customers through application attacks. It is known for its ability to steal banking credentials and perform unauthorized…

Summary Black Basta is a ransomware group known for deploying sophisticated ransomware attacks targeting enterprise networks. Emerging in early 2022, the group employs double extortion tactics by encrypting victim data…

Summary BlackCat, also known as ALPHV, is a sophisticated ransomware group that emerged in 2021. It operates as a ransomware-as-a-service (RaaS) platform, targeting organizations worldwide by exploiting vulnerabilities in applications…

Summary BriansClub operators are cybercriminals responsible for managing and maintaining BriansClub, one of the largest underground marketplaces specializing in the sale of stolen credit card data. The operators facilitate the…

Summary The Buhtrap Group is a cybercriminal organization known for conducting sophisticated application attacks primarily targeting financial institutions and enterprises. Active since at least 2014, Buhtrap employs custom malware and…

Summary The Carbanak Group is a cybercriminal organization known for conducting sophisticated application attacks primarily targeting financial institutions worldwide. Utilizing advanced malware and social engineering techniques, the group infiltrates banking…

Summary The Cl0p ransomware group is a cybercriminal organization known for deploying ransomware attacks primarily targeting large enterprises and organizations worldwide. Active since at least 2019, Cl0p employs sophisticated tactics…

Summary The Cobalt Group is a cybercriminal organization known for conducting sophisticated application attacks primarily targeting financial institutions worldwide. They specialize in exploiting vulnerabilities in banking software and payment systems…

Summary The Conti Group is a highly organized cybercriminal syndicate known for deploying ransomware attacks primarily targeting enterprise networks. Active since 2019, Conti has been responsible for numerous high-profile breaches,…

Summary The Cuba ransomware group is a cybercriminal organization known for deploying ransomware attacks primarily targeting organizations across various sectors. Active since at least 2019, the group employs sophisticated tactics…

Summary DarkMarket operators are individuals or groups responsible for managing and facilitating the activities of DarkMarket, an illicit online marketplace primarily used for the trade of illegal goods and services.…

Summary DarkSide is a ransomware-as-a-service (RaaS) operation known for targeting organizations and demanding large ransom payments in exchange for decrypting compromised data. It gained notoriety for high-profile attacks on critical…

Summary Evil Corp is a notorious cybercriminal group known for conducting sophisticated application attacks, primarily involving ransomware and banking malware. The group has been active since at least 2009 and…

Summary FIN1 is a financially motivated cybercriminal group known for targeting organizations primarily in the financial and technology sectors. The group employs sophisticated application-layer attacks, including spear-phishing and malware deployment,…

Summary FIN10 is a financially motivated cybercriminal group known for targeting organizations through sophisticated application attacks, primarily focusing on stealing payment card data and sensitive financial information. The group employs…

Summary FIN11 is a financially motivated cybercriminal group known for conducting sophisticated application attacks primarily targeting organizations in the financial, retail, and hospitality sectors. The group employs a range of…

Summary FIN12 is a financially motivated cybercrime group known for conducting sophisticated application attacks targeting organizations worldwide. The group primarily focuses on deploying ransomware and data exfiltration tactics to maximize…