# Malware adversary profiles & threat intelligence

Attack chains, MITRE ATT&CK mappings, IOCs, and detection guidance for ransomware operations, infostealers, loaders, and emerging malware campaigns.

## Adversary Profiles

### [Lumma Stealer](https://www.manageengine.com/malware-protection/adversaries/lumma-stealer.html)

**Type:** Infostealer  
Steals credentials, session cookies, crypto wallets, and browser data.  
**Published on:** Apr 28, 2026

### [CastleLoader](https://www.manageengine.com/malware-protection/adversaries/castleloader.html)

**Type:** Loader  
Profiles infected devices and delivers additional malware payloads.  
**Published on:** May 11, 2026

### [Medusa Ransomware](https://www.manageengine.com/malware-protection/adversaries/medusa-ransomware.html)

**Type:** Ransomware  
Steals data and encrypts systems for double-extortion attacks.  
**Published on:** Apr 28, 2026

### [Fake Maccy Stealer](https://www.manageengine.com/malware-protection/adversaries/fakemaccy-stealer.html)

**Type:** Infostealer  
Impersonates a macOS app to steal credentials and sensitive data.  
**Published on:** Jun 30, 2026

### [LockBit Ransomware](https://www.manageengine.com/malware-protection/adversaries/lockbit-ransomware.html)

**Type:** Ransomware  
Spreads across enterprise environments and encrypts critical systems.  
**Published on:** Jul 2, 2026

### [Akira Ransomware](https://www.manageengine.com/malware-protection/adversaries/akira-ransomware.html)

**Type:** Ransomware  
Disables defenses, steals data, and encrypts Windows and Linux systems.  
**Published on:** Jun 2, 2026

### [The Gentlemen Ransomware](https://www.manageengine.com/malware-protection/adversaries/gentlemen-ransomware.html)

**Type:** Ransomware  
Destroys recovery options before encrypting networked systems.  
**Published on:** Jul 14, 2026

### [Qilin Ransomware](https://www.manageengine.com/malware-protection/adversaries/qilin-ransomware.html)

**Type:** Ransomware  
Steals data, disables defenses, destroys backups, and encrypts Windows, Linux, and VMware ESXi systems.  
**Published on:** Jul 13, 2026