Notorious hacker groups on the global hunt list

Buzz

Ngày cập nhật gần nhất: 15/4/2026

Content

In recent years, numerous emerging hacker collectives have garnered significant attention for their perceived level of danger.

These hacker groups have developed malicious software, exploiting security vulnerabilities to target millions of users and businesses.

In recent years, a surge of new hacker factions has emerged, characterized by their significant threat level. Below are some of the most dangerous hacker groups currently active.

DarkSide

DarkSide is the entity behind the disruptive attack on the US water fuel industry back in May, causing the shutdown of Colonial Pipeline's fuel distribution network, sparking concerns of fuel shortages.

DarkSide gained notoriety in August 2020 by targeting major corporations, causing disruptions and demanding ransom payments from victims. With many companies opting for cyber insurance, ransomware groups find it easier to profit.

DarkSide executes ransomware attacks, with masterminds often concealing their identities to mitigate responsibility. After receiving ransom payments, they divide the proceeds amongst themselves.

REvil

The ransomware group REvil is currently making headlines for targeting Kaseya. Previously, REvil attacked JBS, the world's largest meat processing company. REvil was highly active during 2020-2021.

In April, REvil stole technical data on unreleased Apple products from Quanta Computer, a Taiwanese company that assembles Apple laptops. The attackers demanded a $50 million ransom to refrain from leaking the stolen data. It remains unclear whether this sum has been paid or not.

Clop

Founded in 2019, Clop employs a distinct tactic known as 'double extortion.' Clop demands ransom payments in exchange for decryption keys to restore access to stolen data for victims. However, subsequently, Clop demands additional ransom to refrain from publicly disclosing the stolen data.

Historical attack patterns indicate that victims who pay ransom once are more likely to pay again. Therefore, hackers tend to target the same organization, demanding a higher ransom the next time.

Frequently Asked Questions

What are the main tactics used by the hacker group DarkSide?

DarkSide primarily employs ransomware attacks to disrupt operations in various industries. They gained notoriety for their sophisticated methods, targeting significant organizations and demanding ransom payments. Their strategy includes concealing their identities and profiting from companies that have cyber insurance, which makes it easier for them to receive payments without consequences.

How did REvil become notorious in the world of cybercrime?

REvil became notorious for its high-profile attacks, notably targeting Kaseya and JBS, the largest meat processing company. Their audacious demands, such as the $50 million ransom for Apple product data, showcased their bold approach. Their activities significantly impacted businesses globally and highlighted the growing threat of ransomware.

What is the unique strategy employed by the Clop hacker group?

Clop is known for its 'double extortion' tactic, where they demand ransom payments for decryption keys and then threaten to leak stolen data unless additional payments are made. This method exploits victims' fear of data exposure, making them more likely to comply with subsequent ransom demands.

Why are ransomware groups like DarkSide and REvil so successful?

Ransomware groups like DarkSide and REvil succeed due to their ability to exploit security vulnerabilities and the increasing prevalence of cyber insurance among businesses. Companies often opt for quick payments to restore operations, creating a lucrative environment for hackers. Their sophisticated methods and evolving tactics keep them a persistent threat in cybersecurity.

Mytour's content is for customer care and travel encouragement only, and we are not responsible.

For errors or inappropriate content, please contact us at: [email protected]