Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
212
+20.5%tracked ransomware operators
Total Victims
7,332
+11.3%across all groups
Top Operator
qilin
18.6% of victims
Threat Actor Heat-Map
Loading 6 / 17 groups…
Ransomware Group Profiles
#1
qilin
Active
18.6% of attacks
1,362
victims
#2
akira
Active
8.8% of attacks
648
victims
#3
the gentlemen
Active
16.3% of attacks
1,196
victims
#4
inc ransom
Active
12.7% of attacks
931
victims
#5
dragonforce
Active
5.6% of attacks
408
victims
#6
play
Active
4.3% of attacks
318
victims
#7
lockbit5
ELEVATED
4.1% of attacks
300
victims
#8
sinobi
ELEVATED
3.6% of attacks
263
victims
#9
clop
ELEVATED
3.4% of attacks
247
victims
#10
nightspire
ELEVATED
3.2% of attacks
237
victims
#11
killsec3
ELEVATED
3.2% of attacks
232
victims
#12
safepay
ELEVATED
3.2% of attacks
231
victims
#13
everest
ACTIVE
2.6% of attacks
193
victims
#14
coinbase cartel
ELEVATED
4.6% of attacks
339
victims
#15
devman2
ACTIVE
2.1% of attacks
156
victims
#16
devman
ACTIVE
1.9% of attacks
139
victims
#17
lynx
ACTIVE
1.8% of attacks
132
victims