Ransomware needs a way in. Stolen credentials are the cheapest one.
Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
203
+33.6%tracked ransomware operators
Total Victims
6,866
+24.7%across all groups
Top Operator
Qilin
21.5% of victims
Threat Actor Heat-Map
Loading 18 / 20 groups…
Ransomware Group Profiles
#1
Qilin
CRITICAL
21.5% of attacks
1,474
victims
#2
thegentlemen
Active
12.9% of attacks
884
victims
#3
Storm-1567
Active
8.4% of attacks
577
victims
#4
INC Ransom
Active
7% of attacks
481
victims
#5
DragonForce
ELEVATED
5.8% of attacks
398
victims
#6
lockbit
Active
5% of attacks
341
victims
#7
silent
Active
4.5% of attacks
312
victims
#8
clop
Active
4.3% of attacks
297
victims
#9
Play Ransomware
Active
4% of attacks
274
victims
#10
safepay
Active
3.5% of attacks
243
victims
#11
sinobi
Active
3.2% of attacks
222
victims
#12
killsec3
ACTIVE
3% of attacks
205
victims
#13
coinbasecartel
Active
2.9% of attacks
196
victims
#14
nightspire
Active
2.8% of attacks
193
victims
#15
krybit
Active
2.5% of attacks
173
victims
#16
everest
Active
2.1% of attacks
141
victims
#17
nova
Active
2% of attacks
136
victims
#18
deadlock
Active
1.6% of attacks
110
victims
#19
shinyhunters
Active
1.6% of attacks
110
victims
#20
anubis
ACTIVE
1.4% of attacks
99
victims