KELA
KELA provides cyber threat intelligence drawn from cybercrime forums and markets, mainly for corporate and government security teams.
At a glance
- Entity level
- Organisation
- Type
- Company (private)
- Also known as
- KELA Group; KELA Cyber
- Flagship output
- State of Cybercrime (latest: State of Cybercrime 2026, 12 May 2026)
- Category
- Cyber & technology risk
- Tier
- Tier 3: Specialist cybercrime-underground intelligence firm with recurring public threat reports.
- Headquarters
- Tel Aviv, Israel
- Coverage
- Cybercrime underground, ransomware, infostealers, nation-state and AI threats globally.
- Public access
- Free
- Latest activity seen
- 12 May 2026
- Evidence
- Active in 2025 to 26
How it produces intelligence
Monitoring of underground forums, marketplaces and leaked-credential sources via its intelligence platform plus analysts.
Risk themes
Focus regions
Links
What it publishes
| Output | Type | Cadence | Latest edition | Date | |
|---|---|---|---|---|---|
| State of Cybercrime | Threat report | Annual | State of Cybercrime 2026 | 12 May 2026 | Read report |
| AI Threat Landscape | Threat report | Biannual | 2026 Mid-Year AI Threat Landscape | 2026 | Read report |
Latest findings
Recent public risk calls by KELA, summarised in our own words. They are its views, not 311's. Follow each source for the original.
Record cybercrime in 2025, including about 2.86 billion compromised credentials and a 45% rise in ransomware.
12 May 2026 · Horizon: 2025 to 2026 · Source: KELA State of Cybercrime 2026 (Manufacturing.net)State actors increasingly use ransomware as cover for espionage and disruption, notably in Russia-Ukraine, Israel-Iran, US-China and North Korea contexts.
12 May 2026 · Horizon: 2026 · Source: KELA State of Cybercrime 2026 (Manufacturing.net)AI is now used to run attack campaigns, and hacktivism and the number of active ransomware groups are surging.
12 May 2026 · Horizon: 2026 · Source: KELA State of Cybercrime 2026 (Manufacturing.net)
Questions about KELA
What is KELA?
KELA provides cyber threat intelligence drawn from cybercrime forums and markets, mainly for corporate and government security teams.
How does KELA produce its intelligence?
Monitoring of underground forums, marketplaces and leaked-credential sources via its intelligence platform plus analysts.
Where is KELA based?
KELA is based in Tel Aviv, Israel.
What does KELA cover?
Its work covers cyber, terrorism & crime, technology & ai, geopolitics, with a focus on Global.
Profile compiled by the 311 Strategic Intelligence Unit from public sources. Last checked 21 Oct 2026. Listing is not a ranking or an endorsement. Evidence source. Is this your organisation? Request a correction.