Curated, citation-backed profiles (high/medium confidence), plus provisional entries auto-tracked from leak-site claims — clearly badged and not analyst-vetted. Ransomware entries reflect a group's claimed victim, not a confirmed breach.
StormousSourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.FinancialRansomwareEgypt, Saudi Arabia, Lebanon, Israel, Qatar, Turkey, UAEModerate⋮
The GentlemenSourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.FinancialRansomwareSaudi Arabia, UAEModerate⋮