Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Funksec

Inactive for 1+ yr RaaS
World map Statistics
FunkSec is an AI-assisted ransomware-as-a-service group that launched its data leak site in December 2024 and rapidly claimed over 85 victims across government, technology, finance, and education sectors globally, demanding unusually low ransoms and using AI tooling to lower the technical bar for affiliates.
Victims
172
none this month
Rank
#45 / 388
all time
First victim
2023-04-13
estimated attack date
Last victim
2025-03-18
607 days ago
Attack → claim
360.5 d
average delay
Countries
59
hit
Infostealer
65.6%
of victims with a domain
Leak-site uptime
34.4% average, 30 days

Victims per month

By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Technology 45 · 26%
  • Government & Defense 25 · 15%
  • Professional Services 23 · 13%
  • Education 20 · 12%
  • Retail & E-Commerce 14 · 8%
  • Financial Services 10 · 6%
  • Transportation 7 · 4%
  • Healthcare 7 · 4%
  • Other 4 · 2%
  • Agriculture and Food Production 4 · 2%

Top countries

What ransomware.live knows about funksec