Threat video1:00
Netlas Top 10 Threat Actors 2026: Detection & IOCs
Netlas profiles ten actors from Akira to OilRig; this page adds 9 detection rules, 21 IOCs and a free Splunk SPL rule for triage.
Read the full threat intel for Top 10 Critical Threat Actors to Watch in 2026: Akira, DragonForce… →
Chapters
- 0:00The hookTen critical threat actors to watch.
- 0:04The storyAkira hit SonicWall in September.
- 0:12Attack pathReported: actors exploit appliances.
- 0:27AttributionAttributed to Akira.
- 0:32Indicators of compromise4 indicators to hunt: 4 file names.
- 0:38MITRE ATT&CK techniques15 ATT&CK techniques, from initial access to impact.
- 0:43Remediation5 steps now: Patch or upgrade SonicWall SonicOS.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Ten critical threat actors to watch.
0:05Akira hit SonicWall in September.
0:07Cl0p exploited Oracle in August.
0:12Reported: actors exploit appliances.
0:15Plant web shells for foothold.
0:17Use drivers to blind defenses.
0:19Steal credentials, move laterally.
0:22Exfil data and encrypt systems.
0:27Attributed to Akira. Confidence: medium.
0:324 indicators to hunt: 4 file names.
0:3815 ATT&CK techniques, from initial access to impact.
0:435 steps now: Patch or upgrade SonicWall SonicOS.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.