Threats
Threat actors, malware and ransomware groups in the cybersecurity news, with their aliases, their MITRE ATT&CK techniques and Sigma rules to detect them.
Most active · last 4 weeks
- ShinyHuntersActor · 21 stories
- ConnectWiseMalware · 9 stories
- killsecRansomware · 8 stories
- WarLockRansomware · 5 stories
- CallistoActor · 5 stories
- SanctionsRansomware · 3 stories
- QilinRansomware · 3 stories
- Flax TyphoonActor · 3 stories
- UAC-0099Actor · 3 stories
- TA419Actor · 3 stories
- ChrysaorMalware · 2 stories
- Caramel TsunamiActor · 2 stories
- XWormMalware · 2 stories
- xmrigMalware · 2 stories
- NexusMalware · 2 stories
- Cyber PartisansActor · 2 stories
- HAFNIUMActor · 2 stories
- Ploutus ATMMalware · 2 stories
- ZimbraRansomware · 2 stories
- JadePufferActor · 2 stories
New on Jábega · 14 days
- RectorRansomware · since 19 Oct 2026
- UmbralMalware · since 19 Oct 2026
- Caramel TsunamiActor · since 16 Oct 2026
- UTA0178Actor · since 16 Oct 2026
- WARP PANDAActor · since 16 Oct 2026
- WageMoleActor · since 14 Oct 2026
- LurkMalware · since 14 Oct 2026
- XWormMalware · since 13 Oct 2026
- SkynetMalware · since 13 Oct 2026
- MomentumMalware · since 12 Oct 2026
- xmrigMalware · since 9 Oct 2026
- NexusMalware · since 8 Oct 2026
- Flax TyphoonActor · since 8 Oct 2026
- UAC-0099Actor · since 8 Oct 2026
- SmartLoaderMalware · since 8 Oct 2026
- QilinRansomware · since 7 Oct 2026
- HAFNIUMActor · since 7 Oct 2026
- AmateraMalware · since 7 Oct 2026
Most common techniques this month
T1059.001PowerShell 3 threatsT1016System Network Configuration Discovery 3 threatsT1018Remote System Discovery 3 threatsT1078Valid Accounts 3 threatsT1083File and Directory Discovery 3 threatsT1190Exploit Public-Facing Application 3 threatsT1583.001Domains 3 threatsT1585.002Email Accounts 3 threatsT1588.002Tool 3 threatsT1598.003Spearphishing Link 3 threats
Detected automatically in the news using MISP galaxy aliases. Relationships come from co-occurrence in the news, not attribution.