Skip to content
DysruptionHub
Sign in Subscribe
DysruptionHub registry workspace

Threat actors

Browse threat actors with claims linked to incidents in the Cyber Incident Registry.

48 Threat actors
207 Public claims
197 Incidents
Oct 26, 2026 Latest public activity

Search threat actors

Threat actor directory

  • monti

    1 incident1 public claimLatest activity: Nov 19, 2024

  • NightSpire

    Ransomware Group5 incidents5 public claimsLatest activity: Oct 14, 2026

  • Nitrogen

    Aliases: LukaLocker
    Ransomware Group2 incidents2 public claimsLatest activity: May 11, 2026

  • Obscura

    Ransomware Group1 incident1 public claimLatest activity: Sep 23, 2025

  • pear

    Aliases: pure extraction and ransom
    1 incident1 public claimLatest activity: Sep 14, 2025

  • Play

    Aliases: Playcrypt
    Ransomware Group2 incidents2 public claimsLatest activity: Aug 17, 2026

  • Qilin

    Aliases: Agenda, Water Galura
    Ransomware Group37 incidents38 public claimsLatest activity: Oct 24, 2026

  • RansomHouse

    Aliases: Jolly Scorpius
    Ransomware Group2 incidents2 public claimsLatest activity: Jun 17, 2026

  • RansomHub

    Ransomware Group12 incidents12 public claimsLatest activity: Mar 31, 2025

  • Rhysida

    Ransomware Group10 incidents10 public claimsLatest activity: Mar 2, 2026

  • RunSomeWares

    Ransomware Group1 incident1 public claimLatest activity: Aug 13, 2025

  • SafePay

    Ransomware Group7 incidents7 public claimsLatest activity: May 18, 2026

  • Samurai

    1 incident1 public claimLatest activity: Oct 19, 2026

  • Scattered Spider

    Aliases: Muddled Libra, Octo Tempest, Oktapus, Scatter Swine, Storm-0875, UNC3944
    1 incident1 public claimLatest activity: Jul 2, 2025

  • Settra

    Ransomware Group1 incident1 public claimLatest activity: Jul 16, 2026

  • ShinyHunters

    Ransomware Group6 incidents6 public claimsLatest activity: Sep 22, 2026

  • Sinobi

    Ransomware Group1 incident1 public claimLatest activity: Nov 19, 2025

  • Storm

    Ransomware Group2 incidents2 public claimsLatest activity: Aug 23, 2026

  • Termite

    Ransomware Group3 incidents3 public claimsLatest activity: Mar 7, 2026

  • The Gentlemen

    Ransomware Group4 incidents4 public claimsLatest activity: Oct 24, 2026

  • ThreeAM

    Aliases: 3am
    Ransomware Group2 incidents2 public claimsLatest activity: Jan 15, 2025

  • Wallstreet

    Ransomware Group3 incidents3 public claimsLatest activity: Oct 7, 2026

  • WorldLeaks

    Aliases: Hunters International, World Leaks
    Ransomware Group2 incidents2 public claimsLatest activity: Apr 1, 2026