Threat Groups

359 tracked groups

everest

ransomware group
ACTIVE
2190 victims

lockbit3

ransomware group
ACTIVE
2072 victims

akira

ransomware group
ACTIVE
1752 victims

play

ransomware group
ACTIVE
1737 victims

qilin

ransomware group
ACTIVE
1589 victims

clop

ransomware group
ACTIVE
1251 victims

lockbit2

ransomware group
ACTIVE
935 victims

alphv

ransomware group
ACTIVE
730 victims

incransom

ransomware group
ACTIVE
724 victims

bianlian

ransomware group
ACTIVE
527 victims

blackbasta

ransomware group
ACTIVE
522 victims

medusa

ransomware group
ACTIVE
517 victims

ransomhub

ransomware group
ACTIVE
485 victims

8base

ransomware group
ACTIVE
455 victims

safepay

ransomware group
ACTIVE
443 victimsSince Dec 31, 2024

dragonforce

ransomware group
ACTIVE
433 victims

lynx

ransomware group
ACTIVE
364 victims

conti

ransomware group
ACTIVE
359 victims

dispossessor

ransomware group
ACTIVE
335 victims

interlock

ransomware group
ACTIVE
333 victims

pysa

ransomware group
ACTIVE
309 victims

hunters

ransomware group
ACTIVE
307 victims

killsec

ransomware group
ACTIVE
284 victimsSince Dec 31, 2024

nightspire

ransomware group
ACTIVE
281 victimsSince Apr 27, 2025

sinobi

ransomware group
ACTIVE

Ransomware group active in data extortion.

271 victims

rhysida

ransomware group
ACTIVE
270 victims

thegentlemen

ransomware group
ACTIVE

Active ransomware group with data extortion operations.

266 victims

cactus

ransomware group
ACTIVE
245 victims

ransomhouse

ransomware group
ACTIVE
214 victims

hive

ransomware group
ACTIVE

Major RaaS operation disrupted by FBI in January 2023.

207 victimsSince Jun 1, 2021

FOG

ransomware group
ACTIVE
189 victims

vicesociety

ransomware group
ACTIVE
188 victims

blacksuit

ransomware group
ACTIVE
182 victims

malas

ransomware group
ACTIVE
180 victims

handala

ransomware group
ACTIVE
178 victims

funksec

ransomware group
ACTIVE
174 victimsSince Dec 31, 2024

lockbit5

ransomware group
ACTIVE
167 victimsSince Feb 12, 2026

devman

ransomware group
ACTIVE

Former RansomHub and INC Ransom affiliate.

165 victimsSince Jun 16, 2025

royal

ransomware group
ACTIVE
164 victims

cloak

ransomware group
ACTIVE
155 victims

babuk2

ransomware group
ACTIVE

Babuk 2.0/SatanLock. Impersonates original Babuk.

155 victimsSince Jan 27, 2025

coinbasecartel

ransomware group
ACTIVE

CoinbaseCartel specializes in data acquisition through system access and strategic partnerships. It focus exclusively on...

153 victimsSince Feb 13, 2026

blackbyte

ransomware group
ACTIVE
148 victims

avaddon

ransomware group
ACTIVE
146 victims

stormous

ransomware group
ACTIVE
146 victims

meow

ransomware group
ACTIVE
145 victims

sarcoma

ransomware group
ACTIVE
143 victims

snatch

ransomware group
ACTIVE
142 victims

worldleaks

ransomware group
ACTIVE

Active ransomware and data leak group.

134 victims

ragnarlocker

ransomware group
ACTIVE
129 victims

noescape

ransomware group
ACTIVE
126 victims

spacebears

ransomware group
ACTIVE
118 victims

raworld

ransomware group
ACTIVE

RA Group, also known as RA World, first surfaced in April 2023, utilizing a custom variant of the Babuk ransomware.

110 victimsSince Dec 31, 2024

toufan

ransomware group
ACTIVE

Pro-Palestinian Group

108 victimsSince Dec 31, 2024

monti

ransomware group
ACTIVE
108 victims

cuba

ransomware group
ACTIVE
105 victims

eldorado

ransomware group
ACTIVE
105 victims

arcusmedia

ransomware group
ACTIVE
98 victims

nova

ransomware group
ACTIVE

Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion t...

98 victimsSince Oct 1, 2025

pear

ransomware group
ACTIVE

Pure Extraction And Ransom (PEAR) Team is the community of highly responsible and strictly disciplined members. We are a...

96 victimsSince Feb 13, 2026

apt73

ransomware group
ACTIVE
95 victims

revil

ransomware group
ACTIVE
95 victims

ransomexx

ransomware group
ACTIVE
94 victims

SilentRansomGroup

ransomware group
ACTIVE

a former Conti team

92 victimsSince Feb 13, 2026

abyss

ransomware group
ACTIVE
81 victims

warlock

ransomware group
ACTIVE

The Warlock ransomware and operator(s) are believed to be attributed to Storm-2603, a China-based threat actor who is al...

78 victimsSince Jun 11, 2025

lorenz

ransomware group
ACTIVE
78 victims

cicada3301

ransomware group
ACTIVE
75 victims

shinyhunters

ransomware group
ACTIVE
75 victimsSince Nov 4, 2025

karakurt

ransomware group
ACTIVE
74 victims

kairos

ransomware group
ACTIVE
73 victims

direwolf

ransomware group
ACTIVE
72 victimsSince Feb 13, 2026

avoslocker

ransomware group
ACTIVE
70 victims

quantum

ransomware group
ACTIVE
68 victims

ransomed

ransomware group
ACTIVE
67 victimsSince Sep 1, 2023

beast

ransomware group
ACTIVE

Ransomware group active in data extortion.

67 victims

anubis

ransomware group
ACTIVE

Ransomware group active in data extortion.

66 victims

threeam

ransomware group
ACTIVE
66 victims

blacklock

ransomware group
ACTIVE

BlackLock is a rebranded version of another ransomware group known as Eldorado. It has since become one of the most acti...

64 victimsSince Aug 25, 2025

orion

ransomware group
ACTIVE
63 victimsSince Feb 13, 2026

lv

ransomware group
ACTIVE
62 victims

maze

ransomware group
ACTIVE
59 victims

flocker

ransomware group
ACTIVE
58 victims

payoutsking

ransomware group
ACTIVE
56 victimsSince Feb 13, 2026

chaos

ransomware group
ACTIVE
56 victimsSince Feb 13, 2026

blacknevas

ransomware group
ACTIVE
55 victimsSince Feb 13, 2026

darkvault

ransomware group
ACTIVE
55 victims

knight

ransomware group
ACTIVE
55 victims

tengu

ransomware group
ACTIVE

Ransomware group active in data extortion.

54 victims

losttrust

ransomware group
ACTIVE
53 victims

genesis

ransomware group
ACTIVE
52 victimsSince Feb 13, 2026

medusalocker

ransomware group
ACTIVE

Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predec...

50 victimsSince Mar 1, 2024

braincipher

ransomware group
ACTIVE
50 victims

trigona

ransomware group
ACTIVE
49 victims

mallox

ransomware group
ACTIVE
49 victims

nitrogen

ransomware group
ACTIVE
46 victims

ryuk

ransomware group
46 victims

blackshrantac

ransomware group
ACTIVE
44 victimsSince Jan 15, 2026

J

ransomware group
ACTIVE
42 victimsSince Dec 15, 2025

crypto24

ransomware group
ACTIVE
42 victimsSince Feb 13, 2026

donutleaks

ransomware group
ACTIVE
42 victims

midas

ransomware group
ACTIVE
41 victims

embargo

ransomware group
ACTIVE
41 victims

0mega

ransomware group
ACTIVE
40 victims

daixin

ransomware group
ACTIVE
40 victims

darkleakmarket

ransomware group
ACTIVE
39 victims

termite

ransomware group
ACTIVE
39 victims

metaencryptor

ransomware group
ACTIVE
39 victims

helldown

ransomware group
ACTIVE
37 victims

nokoyawa

ransomware group
ACTIVE
36 victims

ciphbit

ransomware group
ACTIVE
36 victims

arvinclub

ransomware group
ACTIVE
35 victims

obscura

ransomware group
ACTIVE
35 victimsSince Jan 21, 2026

spook

ransomware group
ACTIVE
35 victims

securotrop

ransomware group
ACTIVE
33 victimsSince Feb 13, 2026

wannacry

ransomware group
ACTIVE

WannaCry ransomware is a cyber attack that spreads by exploiting vulnerabilities in the Windows operating system. At its...

33 victims

suncrypt

ransomware group
ACTIVE
32 victims

blackmatter

ransomware group
ACTIVE
32 victims

marketo

ransomware group
ACTIVE
32 victims

datacarry

ransomware group
ACTIVE
32 victimsSince Feb 13, 2026

dAn0n

ransomware group
ACTIVE
31 victims

frag

ransomware group
ACTIVE
30 victimsSince Sep 12, 2025

dragonransomware

ransomware group
ACTIVE

Dragon Ransomware, is promising rapid and customizable ransomware operations for Windows systems. Key features include a...

30 victimsSince Dec 31, 2024

global

ransomware group
ACTIVE
30 victimsSince Sep 17, 2025

insomnia

ransomware group
ACTIVE
29 victimsSince Feb 13, 2026

moneymessage

ransomware group
ACTIVE
29 victims

werewolves

ransomware group
ACTIVE
28 victims

kelvinsecurity

ransomware group
ACTIVE
26 victims

netwalker

ransomware group
ACTIVE
26 victims

underground

ransomware group
ACTIVE
25 victims

doppelpaymer

ransomware group
ACTIVE
25 victims

vect

ransomware group
ACTIVE
24 victimsSince Jan 21, 2026

radar

ransomware group
ACTIVE
24 victimsSince Feb 13, 2026

AiLock

ransomware group
ACTIVE
24 victimsSince Mar 7, 2026

xinglocker

ransomware group
ACTIVE
21 victims

payloadbin

ransomware group
ACTIVE
21 victims

ralord

ransomware group
ACTIVE
20 victimsSince Jul 11, 2025

leaktheanalyst

ransomware group
ACTIVE
20 victims

sabbath

ransomware group
ACTIVE
20 victims

hellcat

ransomware group
ACTIVE
20 victims

gunra

ransomware group
ACTIVE
20 victimsSince Feb 3, 2026

payload

ransomware group
ACTIVE
19 victims

cephalus

ransomware group
ACTIVE
19 victimsSince Aug 29, 2025

siegedsec

ransomware group
ACTIVE
19 victims

trinity

ransomware group
ACTIVE
18 victims

morpheus

ransomware group
ACTIVE
18 victimsSince Aug 3, 2025

mountlocker

ransomware group
ACTIVE
18 victimsSince Sep 8, 2021

bravox

ransomware group
ACTIVE

Ransomware group active in data extortion.

18 victims

brotherhood

ransomware group
ACTIVE
18 victimsSince Jan 21, 2026

d4rk4rmy

ransomware group
ACTIVE
18 victimsSince Aug 30, 2025

tridentlocker

ransomware group
ACTIVE
17 victimsSince Feb 13, 2026

mosesstaff

ransomware group
ACTIVE
16 victims

madliberator

ransomware group
ACTIVE
16 victims

sparta

ransomware group
ACTIVE
16 victims

redransomware

ransomware group
ACTIVE
16 victims

benzona

ransomware group
ACTIVE
16 victimsSince Feb 13, 2026

dunghill

ransomware group
ACTIVE
16 victimsSince Dec 31, 2024

apos

ransomware group
ACTIVE
15 victimsSince Oct 8, 2025

nefilim

ransomware group
ACTIVE
15 victims

azroteam

ransomware group
15 victims

freecivilian

ransomware group
ACTIVE
14 victims

weyhro

ransomware group
ACTIVE
14 victimsSince Mar 7, 2025

kawa4096

ransomware group
ACTIVE
14 victimsSince Aug 16, 2025

cheers

ransomware group
ACTIVE
14 victims

unsafe

ransomware group
ACTIVE

A group which seems to recycle leak from other ransomware groups

14 victimsSince Dec 31, 2024

onyx

ransomware group
ACTIVE
14 victims

lapsus$

ransomware group
ACTIVE
14 victims

argonauts

ransomware group
ACTIVE
13 victimsSince Mar 27, 2025

mindware

ransomware group
ACTIVE
13 victims

groove

ransomware group
ACTIVE
13 victims

cryp70n1c0d3

ransomware group
ACTIVE
13 victims

atomsilo

ransomware group
ACTIVE
12 victims

alphalocker

ransomware group
ACTIVE
12 victims

IMNCrew

ransomware group
ACTIVE
12 victimsSince Oct 27, 2025

teamxxx

ransomware group
ACTIVE
12 victimsSince Sep 1, 2025

blackout

ransomware group
ACTIVE
11 victims

icefire

ransomware group
ACTIVE
11 victims

secp0

ransomware group
ACTIVE

Encrypted Extension: .vanhelsing, .vanlocker. Targets Windows Platform only

10 victimsSince Feb 13, 2026

darkrace

ransomware group
ACTIVE
10 victims

darkside

ransomware group
ACTIVE
10 victims

darkpower

ransomware group
ACTIVE
10 victims

crazyhunter

ransomware group
ACTIVE
10 victimsSince Apr 3, 2025

kazu

ransomware group
ACTIVE
10 victimsSince Feb 13, 2026

mogilevich

ransomware group
ACTIVE
9 victims

rook

ransomware group
ACTIVE
9 victims

radiant

ransomware group
ACTIVE
8 victimsSince Nov 12, 2025

skira

ransomware group
ACTIVE
8 victimsSince Dec 1, 2025

malekteam

ransomware group
ACTIVE
8 victims

cryptbb

ransomware group
ACTIVE
8 victims

babuk

ransomware group
ACTIVE
8 victims

lockbit3_fs

ransomware group
ACTIVE
8 victims

karma

ransomware group
ACTIVE
7 victims

chort

ransomware group
ACTIVE
7 victimsSince Dec 31, 2024

bert

ransomware group
ACTIVE
7 victimsSince Aug 2, 2025

pay2key

ransomware group
ACTIVE
7 victims

cyclops

ransomware group
ACTIVE
7 victimsSince Oct 13, 2023

cipherforce

ransomware group
ACTIVE
7 victimsSince Feb 23, 2026

RunSomeWares

ransomware group
ACTIVE
7 victimsSince Apr 19, 2025

arkana

ransomware group
ACTIVE
6 victimsSince Jul 6, 2025

VanHelsing

ransomware group
ACTIVE
6 victimsSince May 13, 2025

yanluowang

ransomware group
ACTIVE
6 victims

egregor

ransomware group
6 victims

silent

ransomware group
ACTIVE

Unlike many other groups, Silent claims to operate with a high level of anonymity and discretion. According to their own...

6 victimsSince Nov 20, 2025

rancoz

ransomware group
ACTIVE
6 victims

dataleak

ransomware group
ACTIVE
6 victims

pandora

ransomware group
ACTIVE
5 victims

kryptos

ransomware group
ACTIVE
5 victimsSince Dec 11, 2025

minteye

ransomware group
ACTIVE
5 victimsSince Dec 24, 2025

donex

ransomware group
ACTIVE
5 victims

raznatovic

ransomware group
ACTIVE

RANSOMED.VC aka Raznatovic

5 victimsSince May 28, 2024

projectrelic

ransomware group
ACTIVE
5 victims

ALP-001

ransomware group
ACTIVE
5 victimsSince Mar 21, 2026

redalert

ransomware group
ACTIVE
5 victims

lockbit

ransomware group
ACTIVE
5 victims

ValenciaLeaks

ransomware group
ACTIVE
5 victimsSince Dec 31, 2024

bqtlock

ransomware group
ACTIVE
5 victimsSince Aug 21, 2025

lockdata

ransomware group
ACTIVE
5 victims

vanirgroup

ransomware group
ACTIVE
4 victims

linkc

ransomware group
ACTIVE
4 victimsSince Apr 26, 2025

orca

ransomware group
ACTIVE
4 victims

desolator

ransomware group
ACTIVE
4 victimsSince Oct 19, 2025

nullbulge

ransomware group
ACTIVE
4 victims

blacktor

ransomware group
ACTIVE
4 victims

shaoleaks

ransomware group
ACTIVE
4 victims

satanlockv2

ransomware group
ACTIVE
4 victimsSince Feb 13, 2026

kraken

ransomware group
ACTIVE
4 victimsSince Feb 13, 2026

osiris

ransomware group
ACTIVE
3 victimsSince Jan 14, 2026

ragnarok

ransomware group
ACTIVE
3 victims

snake

ransomware group
3 victims

bluebox

ransomware group
ACTIVE
3 victimsSince Dec 31, 2024

vendetta

ransomware group
ACTIVE
3 victims

ms13089

ransomware group
ACTIVE
3 victimsSince Feb 13, 2026

hellogookie

ransomware group
ACTIVE
3 victims

qiulong

ransomware group
ACTIVE
3 victims

grief

ransomware group
ACTIVE
3 victims

noname

ransomware group
ACTIVE
3 victimsSince Dec 31, 2024

bonacigroup

ransomware group
ACTIVE
3 victims

exitium

ransomware group
ACTIVE
3 victimsSince Mar 17, 2026

rebornvc

ransomware group
ACTIVE
3 victimsSince Oct 19, 2025

blackshadow

ransomware group
ACTIVE
3 victims

bitlocker

ransomware group
2 victims

datakeeper

ransomware group
ACTIVE
2 victimsSince Feb 13, 2026

sensayq

ransomware group
ACTIVE
2 victims

cryptnet

ransomware group
ACTIVE
2 victims

kittykatkrew

ransomware group
ACTIVE
2 victims

prolock

ransomware group
ACTIVE
2 victims

trisec

ransomware group
ACTIVE
2 victimsSince Feb 21, 2024

lunalock

ransomware group
ACTIVE
2 victimsSince Feb 5, 2026

dharma

ransomware group
2 victims

pryx

ransomware group
ACTIVE
2 victims

ContFR

ransomware group
ACTIVE

RAAS - Ransomware intégré à un fichier PDF, à faire ouvrir à vos victimes ou à insérer vous-même, Windows et Mac, ne fon...

2 victimsSince Feb 13, 2026

wastedlocker

ransomware group
2 victims

nightsky

ransomware group
ACTIVE
2 victims

ransomcortex

ransomware group
ACTIVE
2 victims

robinhood

ransomware group
ACTIVE
2 victims

la_piovra

ransomware group
ACTIVE

ℹ️ La Piovra Ransomware is an exercise of the company Offensive Security (also known as OffSec)

1 victimsSince Jun 14, 2023

playboy

ransomware group
ACTIVE
1 victimsSince Dec 31, 2024

ronggolawe

ransomware group
1 victims

nasirsecurity

ransomware group
ACTIVE
1 victimsSince Oct 14, 2025

agelocker

ransomware group
1 victims

GDLockerSec

ransomware group
ACTIVE

Our team members are from different countries and we are not interested in anything else, we are only interested in doll...

1 victimsSince Jan 27, 2025

deathkitty

ransomware group
1 victims

phoenixcryptolocker

ransomware group
1 victims

cring

ransomware group
1 victims

netflim

ransomware group
1 victims

maui

ransomware group
1 victims

sicarii

ransomware group
ACTIVE
1 victimsSince Jan 19, 2026

zerolockersec

ransomware group
ACTIVE
1 victimsSince Feb 13, 2026

zerotolerance

ransomware group
ACTIVE
1 victimsSince Dec 31, 2024

macaw

ransomware group
1 victims

astroteam

ransomware group
1 victims

synack

ransomware group
ACTIVE
1 victims

insane

ransomware group
ACTIVE
1 victims

memedusalockerdusa

ransomware group
1 victims

kyber

ransomware group
ACTIVE
1 victimsSince Feb 13, 2026

slug

ransomware group
ACTIVE
1 victims

blogxx

ransomware group
1 victims

sekhmet

ransomware group
1 victims

cry0

ransomware group
ACTIVE
1 victimsSince Feb 13, 2026

ShadowByt3$

ransomware group
ACTIVE
1 victimsSince Feb 28, 2026

hades

ransomware group
ACTIVE
1 victims

walocker

ransomware group
ACTIVE
1 victimsSince Aug 22, 2025

roadsweep

ransomware group
1 victims

reynolds

ransomware group
ACTIVE
1 victimsSince Feb 13, 2026

zeppelin

ransomware group
1 victims

networm

ransomware group
1 victims

thanos

ransomware group
1 victims

ranstreet

ransomware group
ACTIVE
1 victimsSince Dec 27, 2023

yurei

ransomware group
ACTIVE
1 victimsSince Sep 12, 2025

crosslock

ransomware group
ACTIVE
1 victims

ako

ransomware group
ACTIVE
0 victims

mydecryptor

ransomware group
ACTIVE
0 victims

lambda

ransomware group
ACTIVE
0 victims

ransomcartel

ransomware group
ACTIVE
0 victims

promptlock

ransomware group
ACTIVE

First known AI-powered ransomware. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama ...

0 victims

fsteam

ransomware group
ACTIVE

New possible leak site posted to a forum on November 20th, 2022, no victims at present. Unclear if its for a ransomware ...

0 victimsSince Jan 7, 2023

aware

ransomware group
ACTIVE
0 victimsSince Jan 25, 2026

ShinySp1d3r

ransomware group
ACTIVE

Likely associated with the cybercrime group BlingLibra (ShinyHunters)

0 victims

qlocker

ransomware group
ACTIVE
0 victims

shadow

ransomware group
ACTIVE
0 victims

hellokitty

ransomware group
ACTIVE
0 victims

nevada

ransomware group
ACTIVE
0 victims

hotarus

ransomware group
ACTIVE
0 victims

x001xs

ransomware group
ACTIVE
0 victims

u-bomb

ransomware group
ACTIVE
0 victimsSince Dec 31, 2024

thegreenbloodgroup

ransomware group
ACTIVE
0 victimsSince Feb 13, 2026

bluesky

ransomware group
ACTIVE
0 victims

chilelocker

ransomware group
ACTIVE
0 victims

xinof

ransomware group
ACTIVE
0 victims

diavol

ransomware group
ACTIVE
0 victims

fletchen

ransomware group
ACTIVE
0 victimsSince Jan 24, 2026

mbc

ransomware group
ACTIVE
0 victims

holyghost

ransomware group
ACTIVE
0 victims

bluelocker

ransomware group
ACTIVE

Blue Locker targets Pakistan’s vital energy sector, particularly Pakistan Petroleum

0 victims

entropy

ransomware group
ACTIVE
0 victims

mamona

ransomware group
ACTIVE
0 victimsSince Mar 19, 2025

0xFFF

ransomware group
ACTIVE
0 victims

0apt

ransomware group
ACTIVE

The group appears unreliable. Most, if not all, of its alleged victims cannot be verified and appear to be randomly sele...

0 victimsSince Feb 13, 2026

Abrahams_Ax

ransomware group
ACTIVE
0 victimsSince Dec 31, 2024

onepercent

ransomware group
ACTIVE
0 victims

darkbit

ransomware group
ACTIVE
0 victimsSince Feb 15, 2023

avos

ransomware group
ACTIVE
0 victims

aGl0bGVyCg

ransomware group
ACTIVE
0 victims

ech0raix

ransomware group
ACTIVE
0 victims

lilith

ransomware group
ACTIVE
0 victims

vfokx

ransomware group
ACTIVE
0 victims

C3RB3R

ransomware group
ACTIVE
0 victims

ranion

ransomware group
ACTIVE
0 victims

againstthewest

ransomware group
ACTIVE
0 victims

lolnek

ransomware group
ACTIVE
0 victims

xp95

ransomware group
ACTIVE
0 victims

rransom

ransomware group
ACTIVE
0 victims

ep918

ransomware group
ACTIVE
0 victims

n3tworm

ransomware group
ACTIVE
0 victims

rabbithole

ransomware group
ACTIVE
0 victimsSince Dec 31, 2024

madcat

ransomware group
ACTIVE
0 victimsSince Nov 27, 2023

aztroteam

ransomware group
ACTIVE
0 victims

adminlocker

ransomware group
ACTIVE
0 victims

crylock

ransomware group
ACTIVE
0 victims

dagonlocker

ransomware group
ACTIVE
0 victims

exorcist

ransomware group
ACTIVE
0 victims

darkangels

ransomware group
ACTIVE
0 victims

zeon

ransomware group
ACTIVE
0 victims

darkbit01

ransomware group
ACTIVE
0 victims

nemty

ransomware group
ACTIVE
0 victims

unsafeleak

ransomware group
ACTIVE
0 victims

sugar

ransomware group
ACTIVE
0 victims

ranzy

ransomware group
ACTIVE
0 victims

ransombay

ransomware group
ACTIVE

Launched on April 24th, 2025 RansomBay is a new project operating under the DragonForce initiative

0 victimsSince May 13, 2025

dread

ransomware group
ACTIVE
0 victims

haron

ransomware group
ACTIVE
0 victims

RAMP

ransomware group
ACTIVE
0 victims

hiveleak

ransomware group
ACTIVE
0 victims

prometheus

ransomware group
ACTIVE
0 victims

mount-locker

ransomware group
ACTIVE
0 victims

solidbit

ransomware group
ACTIVE
0 victims

unknown

ransomware group
ACTIVE
0 victims

cooming

ransomware group
ACTIVE
0 victims

babyduck

ransomware group
ACTIVE
0 victims