Threats
Threat actors, malware and ransomware groups in the cybersecurity news, with their aliases, their MITRE ATT&CK techniques and Sigma rules to detect them.
Most active · last 4 weeks
- ConnectWiseMalware · 6 stories
- TraderTraitorActor · 5 stories
- ShinyHuntersActor · 4 stories
- barracudaRansomware · 4 stories
- SanctionsRansomware · 3 stories
- Volt TyphoonActor · 3 stories
- HiveRansomware · 3 stories
- NefilimRansomware · 3 stories
- Popcorn TimeMalware · 3 stories
- WatchdogActor · 2 stories
- SandwormActor · 2 stories
- GhostActionActor · 2 stories
- APT28Actor · 2 stories
- SafePayRansomware · 2 stories
- QilinRansomware · 1 stories
- LurkMalware · 1 stories
- Shai-HuludMalware · 1 stories
- ChrysaorMalware · 1 stories
- HAZY TIGERActor · 1 stories
- AMOSMalware · 1 stories
New on Jábega · 14 days
- HAZY TIGERActor · since 9 Nov 2026
- AMOSMalware · since 8 Nov 2026
- APT29Actor · since 5 Nov 2026
- Agent SmithMalware · since 5 Nov 2026
- 3amRansomware · since 3 Nov 2026
- DarkBlindersActor · since 2 Nov 2026
- c3rb3rRansomware · since 2 Nov 2026
- NorthStarMalware · since 1 Nov 2026
- BlackJackActor · since 31 Oct 2026
- TraderTraitorActor · since 30 Oct 2026
- FK_UndeadMalware · since 30 Oct 2026
- FrostyNeighborActor · since 30 Oct 2026
- UAT-11473Actor · since 29 Oct 2026
- Volt TyphoonActor · since 28 Oct 2026
- HiveRansomware · since 27 Oct 2026
- NefilimRansomware · since 27 Oct 2026
- QUILTED TIGERActor · since 27 Oct 2026
Most common techniques this month
T1105Ingress Tool Transfer 11 threatsT1059.001PowerShell 10 threatsT1036.005Match Legitimate Resource Name or Location 9 threatsT1082System Information Discovery 8 threatsT1083File and Directory Discovery 8 threatsT1588.002Tool 8 threatsT1204.002Malicious File 8 threatsT1566.001Spearphishing Attachment 8 threatsT1005Data from Local System 8 threatsT1190Exploit Public-Facing Application 7 threats
Detected automatically in the news using MISP galaxy aliases. Relationships come from co-occurrence in the news, not attribution.