Threat Intelligence / Actor / Multiple — Akira, Qilin, CL0P, Nitrogen/Azote, Scattered Spider, Silent Ransom, Medusa, LockBit remnants, BlackSuit/Royal, Shiny Hunters, DragonForce

Multiple — Akira, Qilin, CL0P, Nitrogen/Azote, Scattered Spider, Silent Ransom, Medusa, LockBit remnants, BlackSuit/Royal, Shiny Hunters, DragonForce

Nation: Multiple / Unattributed · 1 tracked threat(s) · Categories: RANSOMWARE

Also known as: UNC4696, Luna Moth, Storm-0558, Octo Tempest, FIN7

Tracked threats

Ransomware Threat Landscape 2025-2027 — RaaS Destabilization, Conti Leak Cascade, ESXi Hypervisor Targeting, BYOVD as Standard Prep, Double/Triple Extortion Economics, IAB Vertical Integration, Critical Infrastructure Escalation — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence