Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Anubis

Active RaaS
World map Statistics
Anubis is a ransomware-as-a-service group active since December 2024 that targets healthcare, engineering, construction, and professional services sectors, offering affiliates a flexible revenue split model and an optional destructive "wipe mode" alongside standard encryption.
Victims
120
2 this month
Rank
#64 / 388
#23 over the last 12 months
First victim
2025-02-25
estimated attack date
Last victim
2026-11-09
6 days ago
Attack → claim
85 d
average delay
Countries
19
hit
Infostealer
33.7%
of victims with a domain
Leak-site uptime
54.6% average, 30 days

Victims per month

-60%
By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Healthcare 31 · 26%
  • Manufacturing 23 · 19%
  • Professional Services 21 · 18%
  • Technology 10 · 8%
  • Financial Services 9 · 8%
  • Transportation 6 · 5%
  • Retail & E-Commerce 5 · 4%
  • Hospitality 5 · 4%
  • Energy & Utilities 4 · 3%
  • Agriculture and Food Production 1 · 1%

Top countries

What ransomware.live knows about anubis