Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
204
+18.6%tracked ransomware operators
Total Victims
7,212
+10.7%across all groups
Top Operator
qilin
18.6% of victims
Threat Actor Heat-Map
Threat Level
Aggressiveness
Lethality
Criticality
Data Leaked
Claimed
Negotiating
LowHigh
Ransomware Group Profiles
#1
qilin
Active
18.6% of attacks
1,345
victims
#2
akira
Active
9.1% of attacks
655
victims
#3
the gentlemen
Active
7.4% of attacks
535
victims
#4
thegentlemen
Active
6.7% of attacks
480
victims
#5
inc ransom
Active
6.6% of attacks
475
victims
#6
incransom
Active
6.4% of attacks
459
victims
#7
dragonforce
Active
5.4% of attacks
390
victims
#8
play
Active
4.5% of attacks
328
victims
#9
lockbit5
Active
4% of attacks
291
victims
#10
sinobi
Active
3.8% of attacks
271
victims
#11
clop
Active
3.5% of attacks
249
victims
#12
nightspire
Active
3.3% of attacks
239
victims
#13
killsec3
Active
3.2% of attacks
232
victims
#14
safepay
Active
3.2% of attacks
230
victims
#15
devman2
Active
2.8% of attacks
204
victims
#16
everest
Active
2.7% of attacks
197
victims
#17
coinbase cartel
Active
2.3% of attacks
169
victims
#18
coinbasecartel
Active
2.3% of attacks
167
victims
#19
devman
Active
2.1% of attacks
150
victims
#20
lynx
Active
2% of attacks
146
victims
Page 1 of 11(204 groups)