Dire Wolf is a human-operated ransomware operation first documented in 2025 and linked to targeted, financially motivated intrusions. Dire Wolf uses a double-extortion model, combining system encryption with the threat
Qilin (also known as Agenda) is a ransomware-as-a-service (RaaS) operation active since at least 2022, used in financially motivated double-extortion campaigns that combine system encryption with data theft. The ransomware
DragonForce is a ransomware-as-a-service (RaaS) operation that first gained public attention in 2023. It operates through a model in which core operators provide ransomware tooling and supporting infrastructure, while affiliates
What DarkHotel is and why it matters DarkHotel is a long-running cyberespionage group known for highly selective, intelligence-driven intrusions against high-value targets. The group is commonly tracked as an advanced
