TTPs & Attack Vectors

MITRE ATT&CK is a globally recognized framework that catalogs the tactics and techniques used by cyber attackers, including ransomware groups. This heatmap maps 156 known techniques across 9 attack tactics — from initial execution to final impact — showing how frequently each technique appears across tracked ransomware campaigns. Darker cells indicate techniques used by a higher number of ransomware groups, helping security teams understand the most common attack patterns to defend against.