In-depth profiles on active ransomware groups — TTPs, targets, IOCs and defence guidance.
Active Since: 2019
Targets: Enterprise, critical infrastructure
Active Since: 2024
Targets: Enterprise, critical infrastructure
Active Since: 2019
Targets: Large enterprises, MFT software users
Active Since: 2021
Targets: Global enterprises, healthcare
Active Since: 2022
Targets: SMBs, municipalities, healthcare
Active Since: 2022
Targets: Healthcare, professional services
Active Since: 2022
Targets: Healthcare, education, critical infra
Active Since: 2022
Targets: Healthcare, critical infrastructure
Active Since: 2023
Targets: SMBs, professional services, education
Active Since: 2023
Targets: Healthcare, education, government
Active Since: 2023
Targets: Healthcare, education, government
Active Since: 2023
Targets: Manufacturing, technology, finance
Active Since: 2023
Targets: SMBs, professional services
Active Since: 2023
Targets: Global enterprises
Active Since: 2023
Targets: Healthcare, education, local govt
Active Since: 2023
Targets: Retail, manufacturing, Asia-Pacific
Active Since: 2024
Targets: Professional services, manufacturing
Active Since: 2023
Targets: Windows environments, enterprises
Active Since: 2024
Targets: Healthcare, technology, defence
Active Since: 2020
Targets: Government, large enterprises
Active Since: 2024
Targets: SMBs, professional services
Active Since: 2023
Targets: Healthcare, government, finance
Active Since: 2023
Targets: SMBs, manufacturing, logistics
Active Since: 2024
Targets: Financial services, technology
Our dark web monitoring service tracks these groups and alerts you if your organisation appears on a leak site.
Dark Web Monitoring Get Help Now