Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
208
+20.2%tracked ransomware operators
Total Victims
7,207
+10.4%across all groups
Top Operator
qilin
18.5% of victims
Threat Actor Heat-Map
Loading 7 / 20 groups…
Ransomware Group Profiles
#1
qilin
Active
18.5% of attacks
1,335
victims
#2
akira
Active
9.1% of attacks
655
victims
#3
the gentlemen
Active
7.5% of attacks
537
victims
#4
thegentlemen
ELEVATED
6.8% of attacks
493
victims
#5
inc ransom
Active
6.6% of attacks
477
victims
#6
incransom
Active
6.4% of attacks
461
victims
#7
dragonforce
Active
5.4% of attacks
387
victims
#8
play
Active
4.5% of attacks
324
victims
#9
lockbit5
ELEVATED
4% of attacks
291
victims
#10
sinobi
ELEVATED
3.7% of attacks
269
victims
#11
clop
ELEVATED
3.4% of attacks
248
victims
#12
nightspire
ELEVATED
3.3% of attacks
239
victims
#13
killsec3
ELEVATED
3.2% of attacks
232
victims
#14
safepay
ELEVATED
3.2% of attacks
228
victims
#15
devman2
ACTIVE
2.8% of attacks
204
victims
#16
everest
ACTIVE
2.7% of attacks
197
victims
#17
coinbase cartel
ACTIVE
2.3% of attacks
169
victims
#18
coinbasecartel
ACTIVE
2.3% of attacks
167
victims
#19
devman
ACTIVE
2.1% of attacks
150
victims
#20
lynx
ACTIVE
2% of attacks
144
victims
Page 1 of 11(208 groups)