Title Description
Infected Mouse

Attackers plant an infected mouse at a company to start a ransomware attack.

Jerusalem Electronic Army

An Islamic hacktivist group active on social media. Named the Jerusalem Electronic Army (J.E.Army), the group has a presence on all major social networks, such as Facebook, Instagram, WhatsApp, Twitter, and Telegram, where it often posts screenshots from targets they claim to have hacked.

Joseph Atkins

An unknown hacker who uses the name “Joseph Atkins” in an email address — almost surely a pseudonym. 

Ragnarok Group

Hacker Group

Russian Main Intelligence Directorate (GRU)



Not yet established

Wizard Spider

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.