Curated, citation-backed subset of the MENA Threat Actor Tracker — high and medium confidence only. Ransomware entries reflect a group's claimed victim, not a confirmed breach.
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.