RANSOMWARE INTELLIGENCE

All Ransomware Groups

Browse all ransomware threat actors tracked by SOCRadar.

Qilin 127 breaches Akira 41 breaches The Gentlemen 41 breaches Orova 36 breaches DragonForce 35 breaches INC Ransom 31 breaches Settra 27 breaches Krybit 25 breaches Everest 25 breaches Dark Project 22 breaches TheGentlemen 20 breaches Play 20 breaches SafePay 20 breaches Storm 15 breaches Chaos 15 breaches LockBit5 13 breaches Pear 12 breaches RansomHouse 11 breaches CmdOrganization 11 breaches Direwolf 11 breaches Titan 10 breaches Genesis 10 breaches Morpheus 10 breaches Kazu 9 breaches Booba Project 9 breaches Aurora 9 breaches ShinyHunters 8 breaches Payload 8 breaches Gunra 7 breaches Barracuda 7 breaches m3rx 7 breaches Deadlock 7 breaches Panzer 6 breaches MedusaLocker 6 breaches DYSPHOR1A 6 breaches Royal 6 breaches MetaEncryptor 6 breaches majinahanashi 5 breaches LockBit 5 breaches Global Secret Group 5 breaches Nova 5 breaches AiLock 5 breaches Xpl0itrs 4 breaches Emperador 4 breaches Interlock 4 breaches coinbasecartel 4 breaches BrainCipher 3 breaches NightSpire 3 breaches ShadowByt3$ 3 breaches Kairos 3 breaches Blackout 3 breaches Bravox 3 breaches SpaceBears 3 breaches Anubis 3 breaches Insomnia 3 breaches Helix 2 breaches Beast 2 breaches payoutsking 2 breaches Arcusmedia 2 breaches IAH6477 2 breaches Silent Ransom Group 2 breaches WorldLeaks 2 breaches LockBit 5 2 breaches BlackNevas 2 breaches World Leaks 2 breaches Lynx 2 breaches Stormous 2 breaches cmd organization 2 breaches 3AM 2 breaches Rhysida 1 breach Blackfield 1 breach Unsafe 1 breach Eclipse 1 breach BlackCat 1 breach Sovcali 1 breach Lapsus$ 1 breach APT73 1 breach Securotrop 1 breach Gammax 1 breach Conti 1 breach ThreeAM 1 breach Triple X 1 breach Lamashtu 1 breach Termite 1 breach Icarus 1 breach Arcus Media 1 breach Majina Hanashi 1 breach Coinbase Cartel 1 breach KillSec 1 breach L Group 1 breach Black X 1 breach Blackwater 1 breach or remote portals. Law firms frequently have attorney personal devices and email aliases that may not appear in corporate-domain telemetry 1 breach VPN 1 breach making personal-alias log coverage an important gap to account for in any credential hygiene assessment 1 breach credential validation 1 breach and authentication to Microsoft 365 1 breach fresh infostealer logs sourced from underground markets 1 breach ExfilSquad 0 breaches CRPxO 0 breaches