Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure
Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
213
+34%tracked ransomware operators
Total Victims
7,660
+36.6%across all groups
Top Operator
Qilin
18.8% of victims
Threat Actor Heat-Map
Loading 13 / 20 groups…
Ransomware Group Profiles
#1
Qilin
Active
18.8% of attacks
1,439
victims
#2
thegentlemen
Active
13.7% of attacks
1,049
victims
#3
silent
Active
12.9% of attacks
988
victims
#4
Storm-1567
Active
7.1% of attacks
543
victims
#5
INC Ransom
Active
6.3% of attacks
486
victims
#6
DragonForce
Active
5.1% of attacks
387
victims
#7
clop
Active
4.8% of attacks
365
victims
#8
lockbit
Active
4.7% of attacks
362
victims
#9
Play Ransomware
Active
3.4% of attacks
263
victims
#10
safepay
Active
3.4% of attacks
262
victims
#11
nightspire
Active
2.8% of attacks
217
victims
#12
krybit
Active
2.5% of attacks
192
victims
#13
coinbasecartel
Active
2.4% of attacks
181
victims
#14
sinobi
ACTIVE
2.2% of attacks
169
victims
#15
everest
ACTIVE
2.2% of attacks
165
victims
#16
storm
ACTIVE
1.6% of attacks
124
victims
#17
deadlock
ACTIVE
1.6% of attacks
120
victims
#18
nova
ACTIVE
1.5% of attacks
118
victims
#19
settra
ACTIVE
1.5% of attacks
116
victims
#20
direwolf
ACTIVE
1.5% of attacks
114
victims