Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
205
+18.5%tracked ransomware operators
Total Victims
7,081
+7.8%across all groups
Top Operator
qilin
19.1% of victims
Threat Actor Heat-Map
Loading 19 / 20 groups…
Ransomware Group Profiles
#1
qilin
Active
19.1% of attacks
1,355
victims
#2
akira
Active
9.2% of attacks
650
victims
#3
inc ransom
Active
6.7% of attacks
474
victims
#4
incransom
Active
6.7% of attacks
472
victims
#5
the gentlemen
Active
6.3% of attacks
447
victims
#6
thegentlemen
Active
5.7% of attacks
406
victims
#7
dragonforce
Active
5.5% of attacks
391
victims
#8
play
Active
4.8% of attacks
339
victims
#9
sinobi
Active
3.9% of attacks
276
victims
#10
clop
Active
3.5% of attacks
249
victims
#11
nightspire
Active
3.5% of attacks
245
victims
#12
safepay
Active
3.4% of attacks
242
victims
#13
lockbit5
Active
3.4% of attacks
238
victims
#14
killsec3
Active
3.3% of attacks
234
victims
#15
everest
Active
2.9% of attacks
205
victims
#16
devman2
Active
2.9% of attacks
204
victims
#17
coinbase cartel
Active
2.4% of attacks
167
victims
#18
coinbasecartel
Active
2.3% of attacks
165
victims
#19
handala
Active
2.3% of attacks
164
victims
#20
lynx
ACTIVE
2.2% of attacks
158
victims
Page 1 of 11(205 groups)