[earflaps]

look for DDoS skids on Telegram notably Killnet, Noname05716 and UserSec and whatever else is there

look for APTs lists in Mitre via campaigns - fancy bear, dancy bear etc

ransomware groups https://www.ransomware.live/#/profiles these motherfuckers like any others constantly rebrand

i bet if u go on linkedin some dumbass researcher from India will have a full list (half of which will be old names of modern groups)

dont forget to put the US government and the NSA as APTs because lets face it they really are according to their own stupid terminology. Like the US literally conducts "intelligence " ops ( pure cybercrime) against Iran every single minute

https://www.ransomware.live much like ransomlook and ransomwatch are great resources for this kind of info.   They are related under the hood here: https://github.com/joshhighet/ransomwatch

Appreciate it dude <3

[sinking]

https://www.ransomlook.io/

[termit]

Do you need just a list of groups or with addresses and photos of members?