Threat Intelligence / Actor / Multiple (RansomHub, SCATTERED SPIDER, CUBA, LockBit affiliates, Spyboy)

Multiple (RansomHub, SCATTERED SPIDER, CUBA, LockBit affiliates, Spyboy)

1 tracked threat(s) · Categories: MALWARE

Also known as: RansomHub, SCATTERED SPIDER, Roasted 0ktapus, UNC3944, CUBA ransomware, Medusa Locker, LockBit affiliates, Spyboy

Tracked threats

BYOVD EDR Killer Tooling — Ransomware Groups Weaponizing Signed Kernel Drivers to Blind Endpoint Detection — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence