Threat Actors

The latest threat actor reports from the Quorum Cyber Threat Intelligence team.

Home / Threat Actors

Seashell Blizzard Threat Actor Profile

Published: 3rd August 2023 | In: Threat Actor Profiles

Seashell Blizzard (also known as Sandworm) is a Russian state-sponsored threat actor group attributed to the Russian Main Directorate/Main Intelligence Directorate of the General Staff of the Armed Forces (GRU) Main Center for Special Technologies (GTsST), Unit 74455.

Learn more

Sangria Tempest Threat Actor Profile

Published: 28th July 2023 | In: Threat Actor Profiles

Sangria Tempest (also known as FIN7) is a sophisticated threat actor group that targets organisations in the banking, retail, and hospitality sectors, for the purposes of financial gain.

Learn more

Scattered Spider Threat Actor Profile

Published: 28th July 2023 | In: Threat Actor Profiles

Scattered Spider (also known as UNC3944 and Roasted 0ktapus) is a relatively new, financially motivated threat group that has been active since at least May 2022. The group is yet to receive a Microsoft designation but will fall into the Tempest (financially motivated) category once registered.

Learn more

Killnet Threat Actor Profile

Published: 10th July 2023 | In: Threat Actor Profiles

Killnet is a pro-Russian hacktivist group that engages in hacktivism and other hacking operations. The group gained notoriety during the first month of the Russia-Ukraine conflict when they began a widespread, although relatively unsophisticated, campaign of distributed denial-of-service (DDoS) attacks, political rhetoric, and misinformation.

Learn more