Ransomware needs a way in. Stolen credentials are the cheapest one.
Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
208
+33.3%tracked ransomware operators
Total Victims
7,450
+33.2%across all groups
Top Operator
Qilin
19.8% of victims
Threat Actor Heat-Map
Loading 3 / 20 groups…
Ransomware Group Profiles
#1
Qilin
Active
19.8% of attacks
1,476
victims
#2
thegentlemen
HIGH
12.9% of attacks
963
victims
#3
silent
Active
10.6% of attacks
790
victims
#4
Storm-1567
ELEVATED
7.4% of attacks
550
victims
#5
INC Ransom
ELEVATED
6.5% of attacks
487
victims
#6
DragonForce
ELEVATED
5.3% of attacks
396
victims
#7
clop
Active
5.1% of attacks
377
victims
#8
lockbit
ELEVATED
4.7% of attacks
348
victims
#9
Play Ransomware
ELEVATED
3.7% of attacks
274
victims
#10
safepay
ELEVATED
3.5% of attacks
260
victims
#11
nightspire
ACTIVE
2.9% of attacks
219
victims
#12
coinbasecartel
ACTIVE
2.6% of attacks
192
victims
#13
sinobi
ACTIVE
2.6% of attacks
190
victims
#14
krybit
ACTIVE
2.5% of attacks
183
victims
#15
everest
ACTIVE
2.1% of attacks
154
victims
#16
nova
ACTIVE
1.7% of attacks
127
victims
#17
storm
ACTIVE
1.6% of attacks
121
victims
#18
deadlock
ACTIVE
1.6% of attacks
118
victims
#19
direwolf
ACTIVE
1.5% of attacks
113
victims
#20
shinyhunters
ACTIVE
1.5% of attacks
112
victims