This is an early look, things will change in the coming weeks.
This data is taken from the Threat Feeds only and not the Ransomware feeds. A weekly Ransomware Threat Summary is in the works. Yes, not every claim from the Clearnet and Tor is going to be on here, that is just simply not possible.
This data covers: Top Threat Actors, Top Attack Categories, Top Victim Countries, Top Attack Days. More data including graphs are coming.
All claims with details, URLs, and more can be found in their respective threat feeds for paid subscribers: https://darkwebinformer.com/tag/subscribers/
Data is taken from the 16th of February 2025 12:01am UTC-0 through 23rd of February 2025 8:20pm UTC-0
Top Threat Actors
- NoName057(16): 62 claims
- miyak0: 43 claims
- RipperSec: 30 claims
- RansomHub: 27 claims
- hacker_levup: 19 claims
- SERVER KILLERS: 19 claims
- akira: 18 claims
- Mr Hamza: 15 claims
- LYNX: 15 claims
- PLAY: 13 claims
- Z-PENTEST ALLIANCE: 12 claims
- Cactus: 10 claims
- Velvet team: 10 claims
- xploitleaks: 9 claims
- Panda: 9 claims
- just_small: 9 claims
- Qilin: 9 claims
- EDRVendor: 9 claims
- INC RANSOM: 9 claims
- Lulzsec Arabs: 9 claims
- Kill Security: 8 claims
- FOG: 8 claims
- asm: 7 claims
- MEDUSA: 6 claims
- DXPLOIT (OFFICIALS): 6 claims
- Dark Storm Team: 6 claims
- hinkim: 6 claims
- ONE Thousand and ONE: 6 claims
- telecoms: 6 claims
- Fatimion cyber team: 5 claims
- 0x0xba$e: 5 claims
- chestniybro: 5 claims
- Keymous +: 5 claims
- INDOHAXSEC: 5 claims
- H4x0r Umbarella Corp H.U.C: 5 claims
- Dark Strom Team: 5 claims
- Croco Siffredi: 5 claims
- Serious: 4 claims
- SAFEPAY: 4 claims
- TwoNet: 4 claims
- j0k3r369: 4 claims
- Anonymous Italia: 4 claims
- Michaell: 4 claims
- CrackedGotSeized: 4 claims
- HUNTERS INTERNATIONAL: 3 claims
- GHNA: 3 claims
- Promised Revenge: 3 claims
- louna: 3 claims
- KryptonSec_My: 3 claims
- Comintern: 3 claims
- jokeir 07x: 3 claims
- DrunkHacker: 3 claims
- CaptainSmok3r: 3 claims
- BanyuwangiXploit: 3 claims
- Brain Cipher: 3 claims
- leadsdatabase: 3 claims
- Funksec: 3 claims
- Belsen_Group: 3 claims
- Cyb3r Drag0nz: 3 claims
- Hiradexo: 2 claims
- blink: 2 claims
- K8074: 2 claims
- udy4t: 2 claims
- Sorb: 2 claims
- Kairos: 2 claims
- rootkik: 2 claims
- LukeBerry: 2 claims
- 0xghost: 2 claims
- Black Maskers Army: 2 claims
- LazaGrad Hack: 2 claims
- Dragon RaaS: 2 claims
- TH3 EL1T3 GHOST: 2 claims
- SkyWave: 2 claims
- DarkOsiris3869: 2 claims
- NanC: 2 claims
- Chucky: 2 claims
- CountySorter: 2 claims
- momo417: 2 claims
- Arab Ghosts Hackers: 2 claims
- RHYSIDA: 2 claims
- DragonForce: 2 claims
- 4NT1 T4NK: 2 claims
- akrust: 2 claims
- BusinessMan: 2 claims
- Cyber Operations Alliance: 2 claims
- OverFlame: 2 claims
- Mysterious Team Bangladesh: 2 claims
- JumboJet: 2 claims
- OpenUps: 2 claims
- JAKARTA CYBER WHITE: 2 claims
- syntheticcz: 2 claims
- Haole9698: 1 claim
- Kornnu: 1 claim
- MR ELANG XPLOIT: 1 claim
- SPIDER-X: 1 claim
- EAGLE CYBER CREW: 1 claim
- DenBots Proof: 1 claim
- armvc2000: 1 claim
- Anonnomy: 1 claim
- Tamburine: 1 claim
- EXECUTOR STRESSER: 1 claim
- Germany: 1 claim
- Underground: 1 claim
- Rachel Hunter: 1 claim
- CYBER TEAM INDONESIA: 1 claim
- cool-t: 1 claim
- nsfw744: 1 claim
- Fibonacci: 1 claim
- Lopiy: 1 claim
- Eraleig (APT73): 1 claim
- D3F417linux: 1 claim
- ssnsearch: 1 claim
- louhunter: 1 claim
- FSOCIETY | FLOCKER: 1 claim
- Linkc: 1 claim
- OpenBullet: 1 claim
- BADREDDINE: 1 claim
- Paracelsus: 1 claim
- SECT0R16: 1 claim
- knSILVER: 1 claim
- ominachan: 1 claim
- hype: 1 claim
- DoTeD: 1 claim
- BLACK SUIT: 1 claim
- sumitswaroop: 1 claim
- inevitable: 1 claim
- b0nd: 1 claim
- javier: 1 claim
- Crocus Siffredi: 1 claim
- b1ack: 1 claim
- ZeroSevenGroup: 1 claim
- X0Frankenstein: 1 claim
- Bobr: 1 claim
- AnonGhost: 1 claim
- EMBARGO: 1 claim
- Anonymous KSA: 1 claim
- Systemadminbd Official (BCF): 1 claim
- Lawxsz: 1 claim
- spartanking: 1 claim
- uz3er: 1 claim
- karmakoma: 1 claim
- nick_diesel: 1 claim
- Moroccan Black Cyber Army: 1 claim
- personX: 1 claim
- szcznoyov: 1 claim
- HxGRD: 1 claim
- greensnake: 1 claim
- z3r0day: 1 claim
Top Attack Categories
- Ransomware – 58 attacks
- DDoS Attacks – 47 attacks
- Data Breaches – 39 attacks
- Website Defacement – 31 attacks
- Credential Stuffing – 25 attacks
- Phishing Campaigns – 19 attacks
- Initial Access Broker (IAB) Listings – 15 attacks
- Hacktivism – 12 attacks
- Insider Threats – 8 attacks
- Unknown/Other – 5 attacks
Top Victim Countries
- 🇺🇸 United States – 63 attacks
- 🇮🇳 India – 41 attacks
- 🇬🇧 United Kingdom – 38 attacks
- 🇩🇪 Germany – 34 attacks
- 🇨🇦 Canada – 28 attacks
- 🇫🇷 France – 26 attacks
- 🇦🇺 Australia – 24 attacks
- 🇮🇹 Italy – 19 attacks
- 🇷🇺 Russia – 15 attacks
- 🌍 Other Countries – 57 attacks
Top Attack Days
- 🗓 Feb 16 – 88 attacks
- 🗓 Feb 17 – 140 attacks
- 🗓 Feb 18 – 114 attacks
- 🗓 Feb 19 – 108 attacks
- 🗓 Feb 20 – 97 attacks
- 🗓 Feb 21 – 92 attacks
- 🗓 Feb 22 – 85 attacks
- 🗓 Feb 23 – 74 attacks
