Record · corpus.blog/posts/01a07df4-3b87-72f3-a985-e53cf77ef40e

Top 10 Critical Threat Actors to Watch in 2026: Ransomware, APTs & Defensive Strategies

Netlas Blog · published 23 January 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at netlas.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 61
Words captured: 9,619

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://cyberscoop.com/akira-ransomware-fbi-cisa-joint-advisory/

cyberscoop.com

https://www.comparitech.com/news/akira-ransomware-stats-on-attacks-ransoms-data-breaches/

comparitech.com

https://www.picussecurity.com/resource/blog/akira-ransomware-analysis-simulation-and-mitigation-cisa-alert-aa24-109a

picussecurity.com

https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforce

trendmicro.com

https://www.checkpoint.com/resources/items/report-the-check-point-q2-2025-ransomware-report

checkpoint.com

https://www.darkreading.com/threat-intelligence/dragonforce-ransom-cartel-profits-rivals-demise

darkreading.com

https://research.checkpoint.com/2025/the-state-of-ransomware-q2-2025/

research.checkpoint.com

https://research.checkpoint.com/2025/the-state-of-ransomware-q3-2025/

research.checkpoint.com

https://industrialcyber.co/ransomware/qilin-ransomware-escalates-rapidly-in-2025-targeting-critical-sectors-with-700-attacks-amid-ransomhub-shutdown/

industrialcyber.co

https://www.sophos.com/es-es/blog/qilin-ransomware-caught-stealing-credentials-stored-in-google-chrome

sophos.com

https://thehackernews.com/2024/10/new-qilinb-ransomware-variant-emerges.html

thehackernews.com

https://www.rescana.com/post/qilin-ransomware-exploits-south-korean-msp-breach-in-korean-leaks-attack-impacting-28-financial-org

rescana.com

https://dailysecurityreview.com/resources/threat-actors-resources/qilin-agenda-ransomware-the-credential-stealers/

dailysecurityreview.com

https://thehackernews.com/2025/10/qilin-ransomware-combines-linux-payload.html

thehackernews.com

https://www.infosecurity-magazine.com/news/qilin-ransomware-40-cases-monthly/

infosecurity-magazine.com

https://asec.ahnlab.com/en/91475/

asec.ahnlab.com

https://www.comparitech.com/news/qilin-ransomware-stats-on-attacks-ransoms-data-breaches/

comparitech.com

LockBit Returns — and It Already Has Victims Read at the source ↗

blog.checkpoint.com

https://areteir.com/article/alphv-blackcat-disruption-operations-resume/

areteir.com

https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-lockbit

trendmicro.com

https://www.trendmicro.com/en_us/research/24/d/operation-cronos-aftermath.html

trendmicro.com

https://www.trendmicro.com/en_us/research/25/i/lockbit-5-targets-windows-linux-esxi.html

trendmicro.com

https://www.dragos.com/blog/dragos-industrial-ransomware-analysis-q3-2025

dragos.com

https://attack.mitre.org/software/S1200/

attack.mitre.org

https://www.sans.org/blog/defending-against-scattered-spider-and-the-com-with-cybercrime-intelligence

sans.org

http://hipaajournal.com/hc3-issues-warning-about-scattered-spider-threat-actor/

hipaajournal.com

https://www.silentpush.com/blog/scattered-spider-2025/

silentpush.com

https://www.infosecurity-magazine.com/news-features/how-uk-retail-responded-hack-wave/

infosecurity-magazine.com

SIM-Swapper, Scattered Spider Hacker Gets 10 Years Read at the source ↗

krebsonsecurity.com

https://www.microsoft.com/en-us/security/blog/2025/07/16/protecting-customers-from-octo-tempest-attacks-across-multiple-industries/

microsoft.com

https://reliaquest.com/blog/scattered-spider-cyber-attacks-using-phishing-social-engineering-2025/

reliaquest.com

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-320a

cisa.gov

https://www.acronis.com/en/tru/posts/the-dragonforce-cartel-scattered-spider-at-the-gate/

acronis.com

https://www.picussecurity.com/resource/blog/tracking-scattered-spider-through-identity-attacks-and-token-theft

picussecurity.com

https://industrialcyber.co/medical/hc3-warns-of-scattered-spider-hackers-leveraging-ai-social-engineering-to-infiltrate-healthcare-other-sectors/

industrialcyber.co

https://malpedia.caad.fkie.fraunhofer.de/actor/fin11

malpedia.caad.fkie.fraunhofer.de

https://breached.company/clop-ransomware-inside-one-of-the-worlds-most-dangerous-cybercrime-operations/

breached.company

https://reliaquest.com/blog/threat-spotlight-ransomware-cyber-extortion-q1-2025/

reliaquest.com

https://www.threatdown.com/blog/ransomware-in-february-2025-cl0p-and-ransomhub-run-riot/

threatdown.com

The State of Ransomware in the First Quarter of 2025: Record-Breaking 126% Spike in Public Extortion Cases Read at the source ↗

blog.checkpoint.com

https://cloud.google.com/blog/topics/threat-intelligence/oracle-ebusiness-suite-zero-day-exploitation

cloud.google.com

https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-clop

trendmicro.com

https://www.zerofox.com/intelligence/flash-report-analysis-of-clop-activity/

zerofox.com

CL0P Seeds ^_- Gotta Catch Em All! Read at the source ↗

unit42.paloaltonetworks.com

https://attack.mitre.org/software/S1040/

attack.mitre.org

https://attack.mitre.org/versions/v13/software/S0154/

attack.mitre.org

https://www.kaspersky.co.in/blog/bluenoroff-ghostcall-ghosthire-lazarus/29776/

kaspersky.co.in

Three Lazarus RATs coming for your cheese Read at the source ↗

blog.fox-it.com

https://www.eset.com/us/about/newsroom/research/north-korean-lazarus-group-targets-drone-sector-europe/

eset.com

https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2026/

chainalysis.com

https://blog.talosintelligence.com/lazarus-three-rats/

blog.talosintelligence.com

https://www.kaspersky.com/about/press-releases/kaspersky-uncovers-new-lazarus-led-cyberattacks-targeting-south-korean-supply-chains

kaspersky.com

https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3669141/nsa-and-partners-spotlight-peoples-republic-of-china-targeting-of-us-critical-i/

nsa.gov

https://www.infoblox.com/blog/security/five-eyes-joint-advisory-on-volt-typhoon-chinese-state-sponsored-threat-actor/

infoblox.com

https://research.checkpoint.com/2025/apt29-phishing-campaign/

research.checkpoint.com

https://pushsecurity.com/blog/identity-attacks-in-the-wild

pushsecurity.com

https://thehackernews.com/2025/08/amazon-disrupts-apt29-watering-hole.html

thehackernews.com

https://levelblue.com/blogs/levelblue-blog/inside-apt34-oilrig-tools-techniques-and-global-cyber-threats

levelblue.com

https://thehackernews.com/2024/10/oilrig-exploits-windows-kernel-flaw-in.html

thehackernews.com

DNS Tunneling in the Wild: Overview of OilRig’s DNS Tunneling Read at the source ↗

unit42.paloaltonetworks.com

https://github.com/aaaddress1/RunPE-In-Memory

github.com