https://intel.threadlinqs.com/actor/0xICS2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/10Xprofit2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/AccountDumpling%20Operators%20(Vietnamese-linked)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Aisuru-Kimwolf%20(Forky)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Akira%20(ransomware-as-a-service%20operation)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/AMOS%20MaaS%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/AMOS%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT282026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT28%20%2F%20Fancy%20Bear2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT28%20%2F%20Fancy%20Bear%20%2F%20Sednit2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT28%20%2F%20Fancy%20Bear%20%2F%20UAC-0001%20(GRU%20Unit%2026165%2C%2085th%20GTsSS)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT29%20%2F%20Midnight%20Blizzard%20(IRON%20TWILIGHT%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT312026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT35%20%2F%20Charming%20Kitten2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT36%20%2F%20Transparent%20Tribe2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT37%20(ScarCruft%20%2F%20Ruby%20Sleet%20%2F%20Velvet%20Chollima)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT37%20%2F%20ScarCruft2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/APT41%20%2F%20Silver%20Dragon2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Arid%20Viper%20%2F%20APT-C-232026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Azote%20Group%20%2F%20UNC46962026-05-30weekly0.6 https://intel.threadlinqs.com/actor/bandcampro2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Belarusian%20KGB%20(State%20Security%20Committee)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Black%20Basta2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/BlueDelta%20(APT28)%20%2F%20PurpleBravo%20(North%20Korea)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/BlueHammer%20(China-nexus)%20and%20RedSun%20(Iran-nexus%2C%20IRGC-adjacent)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Boggy%20Serpens%20%2F%20MuddyWater2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/BonJoviGoesHard%20(Dr.%20Tube)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/BTMOB%20MaaS%20operator%20(Unattributed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Calypso%20%2F%20Red%20Lamassu2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ChainedShark2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Chaotic%20Eclipse2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Chaotic%20Eclipse%20(a.k.a.%20Nightmare%20Eclipse)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Chinese%20cybercriminal%20groups%20(financially%20motivated%2C%20organized%20fraud%20networks)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Chinese-nexus%20(Operation%20TrueChaos)%20%2F%20Amaranth-Dragon%20linked2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Chinese-nexus%20(unnamed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/CityOfSin%20%2F%20%40d_coroner2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/CL-UNK-10682026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ClawHavoc%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ClickFix%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/CLMasters2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Cloud%20Atlas2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Coinbase%20Cartel2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/CoinbaseCartel2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Commercial%20Surveillance%20Vendor%20(Suspected)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Contagious%20Interview%20(DPRK%20%2F%20Famous%20Chollima)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Contagious%20Interview%20%2F%20Lazarus%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/crazzynoob2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Cyber%20Army%20of%20Russia%20Reborn%20(CARR)%20%2F%20Z-Pentest%20%2F%20NoName057(16)%20%2F%20Sector162026-05-30weekly0.6 https://intel.threadlinqs.com/actor/CyberAv3ngers%20%2F%20APT33%20%2F%20MuddyWater%20%2F%20APT34%20%2F%20Handala%20Hack%20Team%20%2F%20APT352026-05-30weekly0.6 https://intel.threadlinqs.com/actor/CyberAv3ngers%20%2F%20Shahid%20Kaveh%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/deadcode092848142026-05-30weekly0.6 https://intel.threadlinqs.com/actor/DeadLock2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/DinDoor%20Operators%20(MuddyWater%20overlap)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Doppelganger%20Proxy%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/DPRK%20APT%20(Contagious%20Interview%20%2F%20Jade%20Sleet)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/DragonForce2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Dust%20Specter2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/EvilTokens%20%2F%20NOIRLEGACY%20GROUP2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/eviltokensadmin2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Ext-Cluster-1082026-05-30weekly0.6 https://intel.threadlinqs.com/actor/FakeWallet%20operators%20(SparkKitty-linked)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Famous%20Chollima%20%2F%20Contagious%20Interview2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Famous%20Chollima%20%2F%20Tenacious%20Pungsan%20%2F%20DEV%23POPPER2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/FamousSparrow2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/FEMITBOT%20operators%20(unattributed%20financially-motivated%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Femwar02%20(BaBlock%2FRorschach%20affiliate)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Fighting%20Ursa%20(APT28)%20%2F%20Fog%20Ransomware2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/FIN7%20%2F%20Cuba%20%2F%20Akira%20(historical%20Veeam%20exploitation)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Fox%20Tempest2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GemStuffer%20(Socket-tracked%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GhostClaw%20Operator2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Ghostwriter%20(UAC-0057%20%2F%20UNC1151)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GlassWorm2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GlassWorm%20Operator2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GlassWorm%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GlassWorm%20Operators%20(Russian-speaking%20crimeware%20crew)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GlassWorm%20Operators%20(Unattributed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GopherWhisper2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Grandoreiro%20operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GreyVibe2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/GriefLure%20Cluster%20(China-nexus%2C%20unattributed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/hackerbot-claw2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/hamzazaheer2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Handala%20%2F%20Void%20Manticore2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Handala%20Hack%20%2F%20Void%20Manticore2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Hangzhou%20Denghong%20Technology%20Co.%2C%20Ltd.%20%2F%20Unknown%20Chinese%20Entity2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Harvester2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Hecker2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/hightower6eu%20%2F%20sakaen736jih%20(OpenClaw)%3B%20ITHKR%20(Hugging%20Face%20ITHKRPAW)%3B%202i7j732ddi%20operator%20(Hugging%20Face%20FAKESECURITY)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Hive01632026-05-30weekly0.6 https://intel.threadlinqs.com/actor/HoneyMyte%20%2F%20Mustang%20Panda2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Horabot%20Operators%20(Brazilian%20Cybercrime)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/INC%20Ransom%20%2F%20GOLD%20IONIC2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/INJ3CTOR32026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Intellexa%20Alliance%20%2F%20Cytrox2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Intellexa%20Consortium2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Interlock%20Ransomware%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/IPIDEA%20Operators%20%2F%20Multiple%20Criminal%20Groups%20(550%2B)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/jacksonkaandorp2%20(npm%20supply-chain%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/JanaWare%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/JanelaRAT%20Operators%20(LATAM%20Portuguese-speaking%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/JiaT75%20(Jia%20Tan)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/JINX-01642026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Kali365%20PhaaS%20operators%20(cluster%20overlap%20with%20Storm-1755%3B%20opportunistic%20abuse%20by%20APT29%20%2F%20Midnight%20Blizzard)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Kimsuky2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Kimsuky%20(APT43)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Kimsuky%20(Velvet%20Chollima)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/KongTuke2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/KryBit%20(RaaS%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Kyber%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/L3Harris%20Trenchant%20%2F%20Operation%20Zero%20%2F%20UNC6353%20%2F%20UNC66912026-05-30weekly0.6 https://intel.threadlinqs.com/actor/LABYRINTH%20CHOLLIMA%20(split%20into%20FAMOUS%20CHOLLIMA%2C%20STARDUST%20CHOLLIMA%2C%20SILENT%20CHOLLIMA)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Larva-26002%20%2F%20RE%23TURGENCE2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Laundry%20Bear%20%2F%20UAC-0190%20%2F%20Void%20Blizzard2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Lazarus%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Lazarus%20Group%20(DPRK%20subgroup)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Lazarus%20Group%20%2F%20Andariel%20%2F%20Stonefly%20%2F%20Onyx%20Sleet%20%2F%20Silent%20Chollima2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Lazarus%20Group%20%2F%20Jade%20Sleet%20%2F%20Famous%20Chollima2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Lazarus%20Group%20%2F%20Stonefly%20(Andariel)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/LenAI2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/LockBit%20%2F%20LockBitSupp%20(Dmitry%20Yuryevich%20Khoroshev)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Lotus%20Blossom%20%2F%20Spring%20Dragon2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/lwxat%20(developer)%20%2F%20multiple%20Chinese-speaking%20cybercrime%20groups%20(operators)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Magecart2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Microsoft%20GenAI%20Research%20Labs%20(Beijing)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Mimo%20%2F%20Hezb2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Mirai%20Botnet%20Operator2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/MuddyWater2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/MuddyWater%20(Mango%20Sandstorm)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/MuddyWater%20(Seedworm)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/MuddyWater%20%2F%20Seedworm2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multi-cluster%20(XLab%20Cluster%20A%20%2B%20Cluster%20B)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(APT28%2C%20APT29%2C%20FIN7%2C%20Lazarus%2C%20ransomware%20operators%20%E2%80%94%20all%20exploit%20NTLM)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(Cobalt%20Group%2C%20APT29%2C%20Kimsuky%2C%20Gamaredon%2C%20TA505%2C%20general%20cybercrime)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(Commodity%20MaaS)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(FIN7%2C%20APT10%2FmenuPass)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(Lazarus%20Group%2C%20Unknown%20%E2%80%94%20SANDWORM_MODE%2C%20Unknown%20%E2%80%94%20GhostAction)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(RansomHub%2C%20SCATTERED%20SPIDER%2C%20CUBA%2C%20LockBit%20affiliates%2C%20Spyboy)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(UNC5174%2C%20UNC6600%2C%20UNC6586%2C%20UNC6588%2C%20UNC6595%2C%20UNC6603%2C%20Earth%20Lamia%2C%20Jackpot%20Panda%2C%20Iran-nexus%2C%20financially%20motivated)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(unnamed%20threat%20actors%20per%20CrowdStrike%3B%20specific%20attribution%20pending)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20(Winter%20Vivern%2FTAG-70%2C%20APT28%2FFancy%20Bear)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20%2F%20Opportunistic2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Actors2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Criminal%20Groups%20and%20Nation%20States2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Groups2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Groups%20(Silk%20Typhoon-linked%20TTPs)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Groups%20(STORM-0501%2C%20CrazyHunter%2C%20LockBit%20affiliates)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20LLMjacking%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Nation-State%20Actors%20(Cloaked%20Ursa%2C%20Curious%20Serpens%2C%20UTA0355%2C%20Void%20Blizzard)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Opportunistic%20Actors2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Organized%20Crime%20Groups2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20RaaS%20groups%20(LockBit%2C%20BianLian%2C%20Black%20Basta%2C%20Conti)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20Russia-Aligned%20(APT44%2FSandworm%2C%20UNC5792%2C%20UNC4221%2C%20Turla%2C%20UNC1151)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20unattributed%20actors2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20uncategorized%20operators%20(incl.%2010xprofit%20affiliate%20hijacking%20campaign)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20%E2%80%94%20Akira%2C%20Qilin%2C%20CL0P%2C%20Nitrogen%2FAzote%2C%20Scattered%20Spider%2C%20Silent%20Ransom%2C%20Medusa%2C%20LockBit%20remnants%2C%20BlackSuit%2FRoyal%2C%20Shiny%20Hunters%2C%20DragonForce2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20%E2%80%94%20APT27%20(PRC)%2C%20APT45%20(DPRK)%2C%20UNC2814%20(PRC)%2C%20UNC5673%20(PRC)%2C%20UNC6201%20(PRC)%2C%20TeamPCP%2FUNC6780%20(cyber%20crime)%2C%20suspected%20Russia-nexus%20(CANFAIL%2FLONGSTREAM)%2C%20pro-Russia%20IO%20actors%20(Operation%20Overload)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%20%E2%80%94%20including%20unattributed%20financially-motivated%20intrusion%20sets%20and%20legacy%20APT%20tooling%20(APT17%2FElderwood%20historical%2C%20Conficker%20descendants)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%2FEvolving2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Multiple%3A%20HelloKitty%2C%20Kinsing%2C%20TellYouThePass%2C%20Andariel%20(Lazarus%20subgroup)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Mustang%20Panda2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Mustang%20Panda%20(medium%20confidence)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Mustang%20Panda%20%2F%20Earth%20Preta2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Mustang%20Panda%20%2F%20UNC63842026-05-30weekly0.6 https://intel.threadlinqs.com/actor/N%2FA2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/N%2FA%20-%20Policy%20Change2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/NGate%20Operator%20(Brazil)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/nhattuanbl2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/NightSpire2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Nimbus%20Manticore%20(UNC1549)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Nitrogen2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/OceanLotus%20(APT32)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Operation%20Triangulation%20Operator2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/P2Pinfect%20Operator%20(Unattributed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Pawn%20Storm%20%2F%20APT28%20%2F%20Fancy%20Bear2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Payload%20(ransomware%20group)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Payload%20Ransomware%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Payouts%20King2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PayoutsKing2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PCPJack%20operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PhantomRaven2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PhishU%20Framework%20operators%20(technique%20disclosed%20by%20Curtis%20Brazzell%2C%20PhishU%2C%20LLC)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PolinRider%20(DPRK%20%2F%20Contagious%20Interview%20%2F%20Lazarus%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PowMix%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/prt-scan%20Operator2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/PureCoder2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Qilin%20(Agenda)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/realtungtungtungsahur%20(unattributed%20individual)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Red%20Menshen%20%2F%20Earth%20Bluecrow2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/REF3076%20operator%20(Brazilian-Portuguese-speaking%2C%20financially%20motivated)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/RomCom%20(Storm-0978)%20%2F%20Paper%20Werewolf%20(GOFFEE)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Runningcrab2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Russian%20State-Sponsored2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Saad%20Fridi%20(SaaadFridi%20%2F%20Mr_Xaad)%20%2F%20Storm-17472026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Safepay2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Saito%20Tech%20(Candiru)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Sandworm%20%2F%20Static%20Tundra2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Sapphire%20Sleet2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Sapphire%20Sleet%20%2F%20UNC1069%20%2F%20BlueNoroff2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Scattered%20Lapsus%20ShinyHunters%20(SLSH)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Screening%20Serpens%20(UNC1549)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Secret%20Blizzard%20(Turla%20%2F%20FSB%20Center%2016)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Seedworm%20(MuddyWater)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Seedworm%20%2F%20MuddyWater2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/SHADOW-AETHER-040%20%26%20SHADOW-AETHER-0642026-05-30weekly0.6 https://intel.threadlinqs.com/actor/SHADOW-EARTH-0532026-05-30weekly0.6 https://intel.threadlinqs.com/actor/SHADOW-WATER-0632026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ShadowSyndicate2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ShinyHunters2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ShinyHunters%20(suspected%20impersonator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/ShinyHunters%20%2F%20Bling%20Libra2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/SideCopy2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Silent%20Ransom%20Group%20(SRG)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Silver%20Fox2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Silver%20Fox%20%2F%20Void%20Arachne2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Silver%20Fox%20APT2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Slow%20Pisces%20%2F%20SCARLETEEL%20%2F%20TeamTNT%20%2F%20TeamPCP%20%2F%20VoidLink2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/SmartApeSG2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Stately%20Taurus%20%2F%20CL-STA-1048%20%2F%20CL-STA-10492026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Static%20Tundra2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Storm-11752026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Storm-1811%20%2F%20Blitz%20Brigantine2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Storm-2372%20%2F%20EvilTokens%20PhaaS%20Operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Storm-25612026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Storm-27552026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Storm-29492026-05-30weekly0.6 https://intel.threadlinqs.com/actor/StormStealer2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/SURXRAT%20Operator%20(Indonesian%20TA)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Suspected%20DPRK%20(DeceptiveDevelopment%20%2F%20Lazarus-adjacent%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Suspected%20Mustang%20Panda%20%2F%20Earth%20Preta%20cluster2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TamperedChef%20%2F%20EvilAI%20operators%20(financially%20motivated%2C%20unattributed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TeamPCP2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TeamPCP%20(Shai-Hulud%20operators)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TeamPCP%20%2F%20Shai-Hulud%20cluster2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TeamPCP%20%2F%20Vect%20Ransomware2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TGR-STA-10302026-05-30weekly0.6 https://intel.threadlinqs.com/actor/The%20Gentlemen2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/The%20Green%20Blood%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TrapDoor%20(ddjidd564%2Fasdxzxc%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Trigona%20Ransomware%20Affiliates2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/TroyDen2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Turla2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Tycoon%202FA%20operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/U.S.%20Federal%20Bureau%20of%20Investigation%20(FBI)%20forensic%20examiners2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAC-02472026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAC-0252%20%2F%20PalachPro2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAC-0255%20%2F%20CyberSerp2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-100272026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-103622026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-4356%20%2F%20ArcaneDoor2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-80992026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-83022026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-86162026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UAT-9244%20%2F%20FamousSparrow2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(Academic%20Research%20%E2%80%94%20ETH%20Zurich%20Applied%20Cryptography%20Group)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(Chinese%20Nexus)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(ClickFix%20MaaS%20Cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(current%20campaigns)%3B%20Silk%20Typhoon%20(Storm-0558)%20exploited%20predecessor%20CVE-2024-123562026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(hands-on-keyboard%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(idbzoomh1)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(Iranian%20IRGC-aligned)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(MaaS)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(Microsoft%20Defender%20Security%20Research%20tracking)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(multiple%20operators)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(NuGet%20account%20'bmrxntfj')2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(NWHStealer%20Operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(pl-ghost%20%2F%20Shai-Hulud-overlapping%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(suspected%20Brazilian%20threat%20actor)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(Suspected%20State-Aligned)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20(Suspected%20State-Sponsored)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20Chinese%20Nation-State%20Actor2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20cryptojacking%20operator%20(Microsoft%20Defender%20Experts%20cluster)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20cybercriminal%20clusters%20(Clusters%20A%2C%20B%2C%20C%2C%20D)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20financially%20motivated%20operator%20(Intrinsec%20tracked)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20Ransomware%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20Remcos%20Operator2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20single%20operator%20(aliases%3A%20mr.4nd3r50n%20%2F%20ce-rwb%20%2F%20t-in-one)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unattributed%20SmartLoader%2FStealC%20operator%20cluster2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC-d_coroner%20(CityOfSin%20campaign)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC10692026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC1069%20%2F%20BlueNoroff2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC1069%20%2F%20Sapphire%20Sleet2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC28142026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC2814%20(PRC-Nexus)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC2814%20%2F%20Gallium2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC28912026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC38862026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC4899%20%2F%20Jade%20Sleet2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC5174%20(Chinese-nexus)%20%2B%20uncategorized%20Russian-nexus%20cluster2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC5174%20%2F%20SNOWLIGHT2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC52212026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC5221%20%2F%20UTA01782026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC5337%20%2F%20CL-UNK-0979%20(China-nexus%20suspected)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC5814%20%2F%20Darcula%20%2F%20Smishing%20Triad%20%2F%20XinXin%20Group%20%2F%20YY%20Lai%20Yu2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC62012026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC6353%20%2F%20PARS%20Defense%20%2F%20UNC67482026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC6353%20%2F%20UNC66912026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC64382026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNC66922026-05-30weekly0.6 https://intel.threadlinqs.com/actor/UNG00022026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Brazilian%20Cybercriminal%20Group)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(China-nexus)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Chinese-speaking%20actor%20per%20Kaspersky)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Chinese-speaking%20actor)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Chinese-speaking%20development%20environment)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(ClearFake%20operator%20cluster%3B%20UNC5342%20%5BDPRK%5D%20adopted%20EtherHiding%20generally%20per%20Google%20Oct%202025%20but%20this%20campaign%20is%20unattributed)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Commercial%20Surveillance%20Vendor)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(financially%20motivated%20eCrime%20actor%3B%20single-operator%20cluster%20per%20EclecticIQ)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Financially-motivated%20AiTM%20PhaaS%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(GitHub%20persona%3A%20parikhpreyash4)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(IoT%20botnet%20operator%20%E2%80%94%20IRC%20channel%20%23biret)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(KeyHunter%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Kris%20%2F%20Kim%20Schmidt)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(laravel-lang%20supply%20chain%20actor)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(likely%20Phishing-as-a-Service%20operator%3B%20TTPs%20overlap%20with%20Tycoon%202FA%20%2F%20Mamba%202FA%20%2F%20Caffeine%20kits)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(LLM-Agent%20Operator%2C%20possible%20Chinese-language%20tooling)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(MaaS%20Operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Malware-Slop%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Megalodon%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(multiple%20operators%20%2F%20MaaS%20distribution)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(nrwise)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(OpenClaw%20fake-installer%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(opportunistic%20cryptojacking%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(PureLogs%20MaaS%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(PureLogs%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Russian-origin)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Russian-speaking%20MaaS%20Operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Russian-speaking%2C%20financially%20motivated)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(SHub%20Stealer%20operators)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Sorry%20ransomware%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(TeamPCP%20copycat)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20(Vidar%20MaaS%20affiliate)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20ACR%20Stealer%20%2F%20Amatera%20Stealer%20operator%20(MaaS%20affiliate)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20art-template%20npm%20hijacker%20(Coruna-kit%20operator)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20Chinese-Speaking%20Phishing%20Group2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20%E2%80%94%20AMOS%20MaaS%20affiliate2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Unknown%20%E2%80%94%20DPRK-aligned%20indicators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/V12%20Security%20Team%20(disclosing%20researchers)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/VECT%20(RaaS%20operator)%20%2B%20TeamPCP%20(supply-chain%20affiliate)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Void%20Dokkaebi2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Void%20Dokkaebi%20(Famous%20Chollima)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Void%20Manticore%20%2F%20Handala2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Void%20Manticore%20%2F%20MuddyWater%20(MOIS)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/vpmdhaj2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/W3LL%20%2F%20G.L.2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/WantToCry%20operators2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Warlock%20%2F%20Water%20Manaul%20%2F%20Storm-26032026-05-30weekly0.6 https://intel.threadlinqs.com/actor/xinfeisoft%20(suspected%20Chinese-origin)2026-05-30weekly0.6 https://intel.threadlinqs.com/actor/Zerobot%20Botnet2026-05-30weekly0.6