APT / THREAT GROUP
ONI
1
aliases
Intelligence Profile
ransomware
Threat Analysis
ONI is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.
Intelligence Reports Mentioning ONI
Agentic AI Used to Conduct Ransomware Attack via Langflow
SecurityWeek· Jul 3, 2026
Medtronic Data Breach Impacts 3.8 Million People
SecurityWeek· Jul 3, 2026
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
The Hacker News· Jul 2, 2026
Improving security posture across the Microsoft partner ecosystem
Microsoft Security Blog· Jul 2, 2026
Alleged Scattered Spider hacker extradited to the United States
BleepingComputer· Jul 2, 2026
Medtronic notifies customers impacted by ShinyHunters data breach
BleepingComputer· Jul 2, 2026
Fake Perplexity Chrome extension spies on your searches
Malwarebytes Labs· Jul 1, 2026
ChocoPoc malware delivered via trojanized exploits on GitHub
BleepingComputer· Jul 1, 2026
Quick Facts
TypeAPT / Threat Group
Aliases1
Also Known As
ONI
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.