Strand Intelligence Blog

Sign in Subscribe

Topic

know your adversary

A collection of 3 issues

Know Your Adversary: Qilin

Qilin are the most active ransomware group in 2025. Following the disappearance of RansomHub, they are equipped with an army of affiliates targeting organisations globally. How to they gain initial access? What should incident responders look out for? Find out in this release of Know Your Adversary.

Know Your Adversary: SafePay

SafePay are a new, aggressive and prolific ransomware group. Whilst they are evolving quickly, all incidents observed by SafePay so far have followed a repeated playbook. Read our analysis of SafePay attacks, and how incident responders can investigate and remediate such incidents.

Know Your Adversary: Akira

Akira are one of the most well known ransomware groups. Whilst their tools, tactics and techniques have evolved over time, this article looks at their approach as of May 2025. What is their most common attack vector? How can incident responders detect and investigate the Akira threat?