Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
228
+26%tracked ransomware operators
Total Victims
6,093
+9.6%across all groups
Top Operator
qilin
22.7% of victims
Threat Actor Heat-Map
Loading 7 / 18 groups…
Ransomware Group Profiles
#1
qilin
Active
22.7% of attacks
1,382
victims
#2
akira
Active
10.3% of attacks
627
victims
#3
dragonforce
Active
6.6% of attacks
402
victims
#4
thegentlemen
Active
11.5% of attacks
703
victims
#5
lockbit5
Active
5% of attacks
305
victims
#6
play
Active
5% of attacks
305
victims
#7
sinobi
Active
4.2% of attacks
254
victims
#8
clop
ELEVATED
4.1% of attacks
250
victims
#9
inc ransom
ELEVATED
7.5% of attacks
456
victims
#10
safepay
ELEVATED
4% of attacks
243
victims
#11
killsec3
ELEVATED
3.9% of attacks
235
victims
#12
nightspire
ELEVATED
3.1% of attacks
186
victims
#13
everest
ACTIVE
2.6% of attacks
159
victims
#14
nova
ACTIVE
2.3% of attacks
141
victims
#15
lynx
ACTIVE
2% of attacks
123
victims
#16
krybit
ACTIVE
1.9% of attacks
114
victims
#17
shinyhunters
ACTIVE
1.7% of attacks
105
victims
#18
handala
ACTIVE
1.7% of attacks
103
victims