In-depth analysis of dark web activity, ransomware trends, and cyber threat intelligence. Explore expert research, case studies, and insights that help you stay ahead of evolving threats.
The Gentlemen ransomware has claimed 610 victims across 75 countries. Manufacturing leads at 28%, with August 2026 batch drops keeping it spiked.
Miyako is an Initial Access Broker with 221 listings since November 2024 - 95% initial access, 42% U.S. targeting, selling firewall root and RCE.
Nova ransomware has logged 129 victims across 45 countries since April 2025. A RaaS operation rebranded from RALord, now surging.
DimasHxR ranks second across all DarkWebSonar-tracked actors with 508 incidents in 90 days - yet has zero open-source coverage.
Keymous+ is a DDoS-specialist hacktivist group with 1,400+ incidents - targeting Morocco, France, India, Egypt, and Israel.
NoName057(16) is the most active DarkWebSonar-tracked actor - 894 incidents in 90 days, 5,500+ total, heavily targeting Europe.
MEDUSA ransomware posted 201 victims in 2025 - 61.7% in the United States, targeting construction, healthcare, and education.
CL0P has logged 635 victim postings since October 2024. 68.5% U.S. targets across manufacturing, technology, and retail sectors.
HEZI RASH hit 856 incidents across 38 countries in three months - DDoS-focused, targeting government, media, and education sectors.
Get the latest cybersecurity insights, threat intelligence updates, and security best practices delivered directly to your inbox.