> LockBit
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator
MOTIVATION: Financial (Double Extortion)
TARGETS: Global Enterprises, Government, Critical Infrastructure
Click to View Full TTPs...
> UNC2452
PRIMARY ROLE: Supply Chain Attack Specialist / Developer
MOTIVATION: Espionage
TARGETS: US Government, IT Service Providers, Think Tanks
Click to View Full TTPs...
> MedusaLocker
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator
MOTIVATION: Financial
TARGETS: Healthcare, Manufacturing, High RDP Exposure
Click to View Full TTPs...
> Pompompurin
PRIMARY ROLE: Data Seller / BreachForums Owner
MOTIVATION: Fame/Financial
TARGETS: Technology, US Government (FBI), Data Aggregators
Click to View Full TTPs...
> Rhynda
PRIMARY ROLE: Initial Access Broker (IAB) and Credential Seller
MOTIVATION: Financial
TARGETS: SMBs, Enterprises with weak remote access security
Click to View Full TTPs...
> Play Ransomware
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator
MOTIVATION: Financial
TARGETS: Government, Financial Services, Law
Click to View Full TTPs...