Threat Actor Intelligence Platform

Explore and analyze global cyber threats · By Joe Shenouda

● Intel updated July 2026

✨ July refresh: every tracked actor now carries a Last Seen date, 11 duplicate profiles merged, and 60+ marquee threat groups (RansomHub, Qilin, LockBit, Akira, Scattered Spider & more) re-verified against 2026 reporting.

0

Tracked Actors

0

Logged Incidents

0

Active Groups

0

High-Severity

🛰️ July 2026 Refresh — Now the Most Complete Edition Yet

Every tracked actor now has a verified or best-estimate Last Seen date, 11 duplicate profiles were merged away, and marquee groups were re-checked against the latest 2025-2026 reporting (law-enforcement actions, rebrands, new malware variants and disruptions).

— verified dates

11 profiles merged

0 results found

Threat Actor Intelligence Platform

By Joe Shenouda — www.shenouda.nl

A curated, continuously-updated reference for tracking global cyber threat actors.

About the data

Severity, status, targets and notable campaigns reflect open-source reporting through 2025/2026.
Incident counts are tracked / observed figures, not exhaustive victim totals.
Every actor now carries a "Last Seen" date — "Verified" means it's grounded in a specific cited event; "Est." means it's a best-available estimate derived from the actor's tracked status where public reporting doesn't specify an exact date.
Click any actor for a full intelligence profile and research links.

Connect

shenouda.nl
Intelligence & advisory — Joe Shenouda