5 Critical Threat Actors You Need to Know About

This ReliaQuest Threat Spotlight profiles five major 2024 threats — RansomHub (dominant RaaS actor executing big-game hunting and using tools like EDRKillShifter and Zerologon), IntelBroker (BreachForums administrator and data vendor exploiting multiple CVEs and developing Endurance ransomware), APT41 (China-linked espionage and financially motivated operations), APT29 (Russia-linked supply-chain and targeted espionage activity), and KillSec (hacktivist group pivoting to RaaS). The report outlines their TTPs, recent significant activity (including large-scale data theft claims and high-impact compromises), and practical mitigations such as patch prioritization, network segmentation, advanced logging, PAM, and automated incident response.