Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
207
+20.3%tracked ransomware operators
Total Victims
7,208
+10.5%across all groups
Top Operator
qilin
18.5% of victims
Threat Actor Heat-Map
Loading 4 / 20 groups…
Ransomware Group Profiles
#1
qilin
CRITICAL
18.5% of attacks
1,335
victims
#2
akira
Active
9.1% of attacks
655
victims
#3
the gentlemen
Active
7.4% of attacks
536
victims
#4
thegentlemen
Active
6.8% of attacks
493
victims
#5
inc ransom
Active
6.6% of attacks
478
victims
#6
incransom
ELEVATED
6.4% of attacks
461
victims
#7
dragonforce
ELEVATED
5.4% of attacks
387
victims
#8
play
ELEVATED
4.5% of attacks
325
victims
#9
lockbit5
ELEVATED
4% of attacks
291
victims
#10
sinobi
ELEVATED
3.7% of attacks
269
victims
#11
clop
ELEVATED
3.5% of attacks
249
victims
#12
nightspire
ELEVATED
3.3% of attacks
239
victims
#13
killsec3
ELEVATED
3.2% of attacks
232
victims
#14
safepay
ELEVATED
3.1% of attacks
227
victims
#15
devman2
ACTIVE
2.8% of attacks
204
victims
#16
everest
ACTIVE
2.7% of attacks
197
victims
#17
coinbase cartel
ACTIVE
2.3% of attacks
169
victims
#18
coinbasecartel
ACTIVE
2.3% of attacks
167
victims
#19
devman
ACTIVE
2.1% of attacks
150
victims
#20
lynx
ACTIVE
2% of attacks
144
victims
Page 1 of 11(207 groups)