Knowledge hub
Plain-English guides to threat actors, infostealers, breaches and the defenses that work against them.
A botnet is a network of internet-connected devices, such as computers, phones, routers, and cameras, infected with malware and secretly controlled by an attacker. The attacker,…
Read moreCompromised credentials are login details, such as usernames, passwords, session tokens, or API keys, that an unauthorized party has stolen, leaked, or obtained, so the account…
Read moreWhat Is Akira Ransomware? Akira ransomware is a ransomware-as-a-service (RaaS) operation active since March 2023 that steals a victim's data and then encrypts their systems to…
Read moreIntelBroker, Anonymous Sudan and SiegedSec are three of the most closely tracked hacktivist and data-leak actors of recent years, and all three have drawn law-enforcement action.…
Read moreInfostealer malware groups are distinct malware families, such as Lumma, RedLine, Vidar, StealC, and Raccoon, that steal saved passwords, session cookies, and crypto wallets from infected…
Read moreRansomware recovery is the process of containing an attack, removing the intruder's access, and restoring data and systems from clean backups (or verified decryption) before returning…
Read moreDouble extortion ransomware is an attack in which criminals steal your data, encrypt your systems, and then demand payment twice: once for the decryption key and…
Read moreShinyHunters is a financially motivated hacking and extortion group that has spent the past several years breaching companies, universities, and cloud platforms, stealing data, and threatening…
Read moreLapsus$ is a hacking and extortion group first known for breaching Okta, Microsoft, Nvidia, Samsung, and Uber in 2021 and 2022 using social engineering rather than…
Read moreRun a free dark web report for your domain: breached credentials, infostealer logs and dark web mentions in seconds.
