Threats
Threat actors, malware and ransomware groups in the cybersecurity news, with their aliases, their MITRE ATT&CK techniques and Sigma rules to detect them.
Most active · last 4 weeks
- ShinyHuntersActor · 24 stories
- killsecRansomware · 8 stories
- WarLockRansomware · 5 stories
- CallistoActor · 5 stories
- QilinRansomware · 3 stories
- Flax TyphoonActor · 3 stories
- UAC-0099Actor · 3 stories
- ConnectWiseMalware · 3 stories
- TA419Actor · 3 stories
- ClopRansomware · 3 stories
- NexusMalware · 2 stories
- Cyber PartisansActor · 2 stories
- HAFNIUMActor · 2 stories
- Ploutus ATMMalware · 2 stories
- SanctionsRansomware · 2 stories
- ZimbraRansomware · 2 stories
- JadePufferActor · 2 stories
- Mini Shai-HuludMalware · 2 stories
- StealcMalware · 1 stories
- TeamPCPActor · 1 stories
New on Jábega · 14 days
- LurkMalware · since 14 Oct 2026
- SkynetMalware · since 13 Oct 2026
- XWormMalware · since 13 Oct 2026
- MomentumMalware · since 12 Oct 2026
- xmrigMalware · since 9 Oct 2026
- NexusMalware · since 8 Oct 2026
- Flax TyphoonActor · since 8 Oct 2026
- UAC-0099Actor · since 8 Oct 2026
- SmartLoaderMalware · since 8 Oct 2026
- QilinRansomware · since 7 Oct 2026
- HAFNIUMActor · since 7 Oct 2026
- AmateraMalware · since 7 Oct 2026
- Cyber PartisansActor · since 5 Oct 2026
- Ploutus ATMMalware · since 5 Oct 2026
- TA419Actor · since 4 Oct 2026
- ChrysaorMalware · since 2 Oct 2026
- mimicRansomware · since 2 Oct 2026
- Silent LibrarianActor · since 2 Oct 2026
- WarLockRansomware · since 1 Oct 2026
- SanctionsRansomware · since 1 Oct 2026
Most common techniques this month
T1105Ingress Tool Transfer 6 threatsT1036.005Match Legitimate Resource Name or Location 5 threatsT1059.007JavaScript 5 threatsT1078Valid Accounts 5 threatsT1078.004Cloud Accounts 5 threatsT1083File and Directory Discovery 5 threatsT1190Exploit Public-Facing Application 5 threatsT1550.001Application Access Token 5 threatsT1016System Network Configuration Discovery 4 threatsT1082System Information Discovery 4 threats
Detected automatically in the news using MISP galaxy aliases. Relationships come from co-occurrence in the news, not attribution.