SOCRadar equivalent · campaign intelligence

Campaigns

Clusters of signals linked by group, victim or ATT&CK techniques. They are operational aggregations, not confirmed campaigns unless the source states so.

Ransomware Reports

Clusters80group / victim / signal

Linked signals3000ultimo anno

ATT&CK5techniques observed

MethodDefensiveno contact with actors

Campaign board

Signal clusters

Priority on reading, not on attribution

Clusters	Signals	Named countries	Techniques	Latest
Cluster senza attribuzionetransparent aggregation	592	BE, CA, ES, HK, HR, IT, JP, MK, NL, PL, SG, SI, US	T0008, T0024.002, T0040, T0042, T0048	26/09/2026 11:55
qilintransparent aggregation	258	AE, AR, AU, BR, CA, CH, CL, CO, DE, ES, FI, FR, GB, IE, IL, IN, IT, JP, MK, MT, MX, MY, NL, PH, QA, RO, SE, SG, SK, TH, TR, TT, US, ZA	-	25/09/2026 17:39
the gentlementransparent aggregation	175	-	-	25/09/2026 13:36
akiratransparent aggregation	112	BR, CA, CH, DE, GB, IT, NL, US	-	24/09/2026 18:36
thegentlementransparent aggregation	106	AE, AO, AR, AT, AU, BG, BR, BZ, CH, CL, CO, DE, DK, EG, ES, FI, FR, GB, GE, HR, IL, IN, IT, JP, MX, MY, NO, PE, PL, PR, PT, SA, SE, SG, TH, TR, TW, US, VN, WS, ZA	-	26/09/2026 10:43
krybittransparent aggregation	96	AE, AU, BR, BT, CA, CH, CN, DE, FR, GA, GE, GT, HR, HT, IN, KE, MA, MX, SA, TH, TR, TZ, US, VN, ZA	-	24/09/2026 23:44
direwolftransparent aggregation	74	AE, BR, CA, CL, CO, DK, GB, ID, IT, MX, MY, NL, SE, TH, TR, US, ZA	-	14/09/2026 19:44
lockbit5transparent aggregation	61	AR, BE, BR, CL, CZ, DE, FI, IT, JP, KZ, MX, NL, SO, TN, TW, US, ZA	-	25/09/2026 14:40
emperadortransparent aggregation	54	AR, BA, BR, CO, CZ, ES, IN, IT, KR, SE, US, VN	-	25/09/2026 19:51
stormtransparent aggregation	54	-	-	24/09/2026 19:15
cloptransparent aggregation	50	AU, CA, CO, CZ, FI, GB, GE, KR, NZ, OM, TH, US	-	23/09/2026 19:32
inc ransomtransparent aggregation	43	-	-	25/09/2026 17:39
safepaytransparent aggregation	43	AR, AT, CA, CH, DE, ES, IT, KR, MX, PE, PH, PT, US	-	15/09/2026 23:35
everesttransparent aggregation	42	BE, DE, ES, FR, IT, JP, MX, PE, SE, TW, US, ZA	-	25/09/2026 20:38
Stormtransparent aggregation	42	AU, CA, US	-	26/09/2026 10:48
metaencryptortransparent aggregation	40	CA, DE, ID, JP, KR, SG, US	-	26/09/2026 14:35
incransomtransparent aggregation	39	AR, BR, CA, CH, DE, ES, GB, IT, MA, MO, MX, MY, NL, PA, US, ZA	-	25/09/2026 12:33
shinyhunterstransparent aggregation	39	CH, DE, IL, SE, US	-	24/09/2026 19:35
coinbase carteltransparent aggregation	35	-	-	31/08/2026 02:30
rhysidatransparent aggregation	31	DE, FR, HU, PH, US	-	24/09/2026 21:38
dragonforcetransparent aggregation	30	AE, AR, BR, CA, FR, GB, TH, US	-	24/09/2026 19:35
Panzertransparent aggregation	30	BG, BR, DE, ES, FR, ID, IT, PE, PT, PY, RS, SA, SE	-	19/09/2026 00:23
playtransparent aggregation	30	BR, CA, DE, IE, LV, RS, US	-	22/09/2026 01:42
audit teamtransparent aggregation	29	-	-	22/09/2026 18:27
peartransparent aggregation	29	JM, US	-	24/09/2026 23:40
SilentRansomGrouptransparent aggregation	29	DE, US	-	25/09/2026 21:28
kazutransparent aggregation	28	AR, BR, CA, MX, PK, US	-	07/09/2026 10:43
leakeddatatransparent aggregation	27	-	-	25/09/2026 23:44
zawootransparent aggregation	27	-	-	24/09/2026 16:42
chaostransparent aggregation	26	AU, CN, GB, NL, US	-	17/09/2026 22:42
Wallstreettransparent aggregation	23	GB, IR, SV, US	-	25/09/2026 17:53
orovatransparent aggregation	21	-	-	20/09/2026 18:37
titantransparent aggregation	21	AR, IT	-	22/09/2026 23:34
AuditTeamtransparent aggregation	20	AR, CO, DE, IN, IT, JP, KR, RU, UA	-	22/09/2026 13:50
Vexy Ransomwaretransparent aggregation	19	AR, BR, EC, GB, IN, IT, JP, KE, MX, US, VN	-	25/09/2026 15:24
panzertransparent aggregation	18	-	-	21/09/2026 17:31
vexytransparent aggregation	18	-	-	25/09/2026 18:40
anubistransparent aggregation	17	DE, GB, US	-	23/09/2026 00:24
N0ntransparent aggregation	17	AR, BR, LU, ML, SE, TR, US, UZ, VE, VN	-	25/09/2026 05:21
wallstreettransparent aggregation	17	-	-	25/09/2026 20:38
black nevastransparent aggregation	15	-	-	17/09/2026 03:41
coinbasecarteltransparent aggregation	15	AR, CN, DE, FR, ID, NZ, PH, US	-	23/08/2026 23:26
medusalockertransparent aggregation	15	AE, AU, BG, CN, CZ, FR, GH, IN, MX, TH, US	-	23/09/2026 09:41
auroratransparent aggregation	14	DE, US	-	07/09/2026 18:33
n0ntransparent aggregation	14	-	-	26/09/2026 14:35
nightspiretransparent aggregation	14	CO, HK, US	-	21/09/2026 22:43
cyberleektransparent aggregation	13	-	-	24/08/2026 17:23
DYSPHOR1Atransparent aggregation	13	ID, IN, MM, TH	-	06/09/2026 19:50
majinahanashitransparent aggregation	13	ES, GB, MY	-	01/09/2026 12:44
booba teamtransparent aggregation	12	-	-	23/09/2026 14:52
brain ciphertransparent aggregation	12	-	-	23/09/2026 22:37
BrainCiphertransparent aggregation	12	AE, CA, DE, ES, GB, NL, US	-	23/09/2026 20:20
Booba Projecttransparent aggregation	11	GB, IT, MD, MX, RU, US	-	23/09/2026 12:21
dark projecttransparent aggregation	11	-	-	15/09/2026 19:37
dysphor1atransparent aggregation	11	-	-	06/09/2026 22:42
Dark Projecttransparent aggregation	10	BR, US	-	09/09/2026 14:52
insomniatransparent aggregation	10	US	-	15/09/2026 21:25
kairostransparent aggregation	10	AU, ES, FR, US	-	22/09/2026 20:34
unsafetransparent aggregation	10	BR, FI, US	-	22/09/2026 01:42
arcusmediatransparent aggregation	9	BR, CA, CR, PE	-	23/09/2026 12:24
Eclipsetransparent aggregation	9	FR, IN, IT, SG, US	-	14/09/2026 18:21
global secret grouptransparent aggregation	9	-	-	21/09/2026 21:46
Global Secret Grouptransparent aggregation	9	IN, US	-	21/09/2026 19:53
iah647transparent aggregation	9	-	-	15/09/2026 13:39
iah6477transparent aggregation	9	US	-	15/09/2026 02:55
Orovatransparent aggregation	9	HK, IN, TW, US	-	20/09/2026 16:21
termitetransparent aggregation	9	US	-	26/09/2026 07:48
eclipsetransparent aggregation	8	-	-	14/09/2026 20:41
ShadowByt3$transparent aggregation	8	GB, ID, US	-	16/09/2026 23:53
spiralstransparent aggregation	8	-	-	26/09/2026 14:35
arcus mediatransparent aggregation	7	-	-	23/09/2026 14:52
genesistransparent aggregation	7	US	-	15/09/2026 02:40
space bearstransparent aggregation	7	-	-	23/09/2026 22:38
spacebearstransparent aggregation	7	CZ, DE, IT, PT, US	-	23/09/2026 19:44
the crewtransparent aggregation	7	-	-	24/08/2026 17:33
Barracudatransparent aggregation	6	AR, KR, TR, US	-	24/09/2026 04:21
deadlocktransparent aggregation	6	-	-	01/09/2026 23:35
EndZonetransparent aggregation	6	US	-	24/09/2026 03:21
interlocktransparent aggregation	6	US	-	15/09/2026 22:33
ransomhousetransparent aggregation	6	-	-	17/09/2026 21:40