Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
| Group | First Victim * | Last Victim | Victims (7d) | Victims (30d) | Victims (90d) | 90-day Uptime | Online |
|---|---|---|---|---|---|---|---|
| Helix | 2026-08-07 | 2026-10-18 | 6 | 6 | 14 |
|
Offline |
| emperador | 2026-08-10 | 2026-10-18 | 5 | 23 | 43 |
|
Online |
| N0n | 2026-09-18 | 2026-10-18 | 89 | 107 | 116 |
|
Offline |
| qilin | 2022-10-08 | 2026-10-18 | 28 | 86 | 348 |
|
Online |
| iah6477 | 2026-08-20 | 2026-10-18 | 8 | 8 | 16 |
|
Online |
| Eclipse | 2026-08-14 | 2026-10-17 | 3 | 10 | 20 |
|
Offline |
| everest | 2021-09-09 | 2026-10-17 | 7 | 18 | 38 |
|
Online |
|
New
BYOD
|
2026-09-29 | 2026-10-17 | 2 | 9 | 9 |
|
Offline |
| nightspire | 2025-02-17 | 2026-10-16 | 2 | 14 | 34 |
|
Online |
| Wallstreet | 2026-06-16 | 2026-10-16 | 15 | 26 | 38 |
|
Offline |
|
New
THE SEVEN DEADLY SINS
|
2026-09-21 | 2026-10-16 | 7 | 8 | 8 |
|
Offline |
| thegentlemen | 2023-02-28 | 2026-10-16 | 37 | 135 | 380 |
|
Online |
| aurora | 2026-04-17 | 2026-10-16 | 4 | 8 | 26 |
|
Online |
| play | 2022-11-26 | 2026-10-16 | 9 | 20 | 46 |
|
Offline |
| Redact | 2026-06-28 | 2026-10-16 | 3 | 5 | 5 |
|
Offline |
| Vexy Ransomware | 2026-07-06 | 2026-10-16 | 4 | 8 | 22 |
|
Offline |
| bravox | 2025-05-15 | 2026-10-16 | 1 | 3 | 10 |
|
Online |
| lockbit5 | 2023-04-17 | 2026-10-16 | 10 | 20 | 51 |
|
Online |
|
New
0x00
|
2026-10-15 | 2026-10-15 | 1 | 1 | 1 |
|
Offline |
| spacebears | 2024-04-25 | 2026-10-15 | 2 | 3 | 18 |
|
Online |
| akira | 2023-04-12 | 2026-10-15 | 9 | 30 | 90 |
|
Online |
| incransom | 2023-08-06 | 2026-10-15 | 7 | 31 | 103 |
|
Online |
| dragonforce | 2022-10-20 | 2026-10-14 | 2 | 11 | 43 |
|
Online |
| kairos | 2024-06-26 | 2026-10-14 | 1 | 5 | 9 |
|
Online |
| pear | 2023-08-18 | 2026-10-14 | 3 | 7 | 20 |
|
Online |
| AuditTeam | 2026-02-21 | 2026-10-13 | 3 | 11 | 41 |
|
Offline |
| Panzer | 2026-08-05 | 2026-10-13 | 2 | 12 | 43 |
|
Offline |
|
New
HYFLOCK
|
2026-09-09 | 2026-10-13 | 3 | 7 | 8 |
|
Offline |
| direwolf | 2025-04-17 | 2026-10-13 | 1 | 2 | 62 |
|
Offline |
| Orova | 2026-05-03 | 2026-10-13 | 7 | 9 | 38 |
|
Offline |
| sarcoma | 2024-07-09 | 2026-10-13 | 1 | 1 | 1 |
|
Offline |
| safepay | 2023-11-10 | 2026-10-12 | 1 | 24 | 73 |
|
Online |
| Storm | 2026-08-03 | 2026-10-12 | 2 | 25 | 86 |
|
Offline |
| metaencryptor | 2023-08-16 | 2026-10-12 | 2 | 11 | 27 |
|
Online |
| Deadlock | 2026-05-22 | 2026-10-12 | 1 | 6 | 30 |
|
Offline |
| interlock | 2023-12-01 | 2026-10-12 | 6 | 13 | 21 |
|
Online |
| Dark Project | 2026-06-08 | 2026-10-12 | 3 | 3 | 23 |
|
Offline |
| rhysida | 2023-06-05 | 2026-10-11 | 0 | 13 | 27 |
|
Online |
| BrainCipher | 2024-07-01 | 2026-10-11 | 1 | 10 | 21 |
|
Offline |
|
New
UmBra
|
2026-10-06 | 2026-10-10 | 0 | 10 | 10 |
|
Offline |
| exitium | 2026-03-17 | 2026-10-10 | 0 | 1 | 1 |
|
Online |
| anubis | 2025-02-25 | 2026-10-09 | 0 | 5 | 18 |
|
Online |
| threeam | 2023-08-04 | 2026-10-09 | 0 | 9 | 12 |
|
Offline |
| arcusmedia | 2024-05-08 | 2026-10-09 | 0 | 7 | 13 |
|
Online |
| Barracuda | 2026-08-05 | 2026-10-09 | 0 | 5 | 14 |
|
Offline |
| Black X | 2025-05-07 | 2026-10-09 | 0 | 3 | 7 |
|
Offline |
| chaos | 2025-02-19 | 2026-10-09 | 0 | 4 | 25 |
|
Online |
| termite | 2023-05-11 | 2026-10-09 | 0 | 6 | 9 |
|
Online |
| SilentRansomGroup | 2022-06-07 | 2026-10-08 | 0 | 17 | 46 |
|
Offline |
| netrunner | 2026-04-03 | 2026-10-08 | 0 | 4 | 4 |
|
Online |
| Majinahanashi | 2026-06-27 | 2026-10-08 | 0 | 2 | 12 |
|
Offline |
| payload | 2026-02-17 | 2026-10-08 | 0 | 2 | 8 |
|
Offline |
| RunSomeWares | 2024-06-22 | 2026-10-08 | 0 | 1 | 1 |
|
Offline |
| EndZone | 2026-09-18 | 2026-10-06 | 0 | 4 | 6 |
|
Offline |
| lamashtu | 2026-04-11 | 2026-10-05 | 0 | 14 | 14 |
|
Online |
| medusalocker | 2021-11-03 | 2026-10-05 | 0 | 9 | 25 |
|
Online |
| ransomhouse | 2021-06-01 | 2026-10-05 | 0 | 1 | 11 |
|
Online |
| Doommageddon | 2026-03-08 | 2026-10-05 | 0 | 5 | 8 |
|
Offline |
| Global Secret Group | 2026-01-17 | 2026-10-05 | 0 | 3 | 30 |
|
Offline |
|
New
Scarlettgroup
|
2026-10-05 | 2026-10-05 | 0 | 1 | 1 |
|
Offline |
| krybit | 2026-03-30 | 2026-10-04 | 0 | 13 | 84 |
|
Online |
| Spirals | 2026-09-18 | 2026-10-03 | 0 | 4 | 5 |
|
Offline |
| cry0 | 2026-03-30 | 2026-10-02 | 0 | 3 | 4 |
|
Online |
| Booba Project | 2026-06-24 | 2026-10-02 | 0 | 13 | 24 |
|
Offline |
| payoutsking | 2025-04-17 | 2026-10-01 | 0 | 2 | 9 |
|
Online |
| morpheus | 2025-01-07 | 2026-10-01 | 0 | 1 | 3 |
|
Online |
| ULose | 2026-06-09 | 2026-09-30 | 0 | 1 | 1 |
|
Offline |
| genesis | 2024-05-07 | 2026-09-30 | 0 | 4 | 21 |
|
Online |
| settra | 2026-06-02 | 2026-09-30 | 0 | 12 | 57 |
|
Online |
| Gammax | 2026-07-03 | 2026-09-29 | 0 | 2 | 6 |
|
Offline |
| m3rx | 2026-04-29 | 2026-09-29 | 0 | 7 | 14 |
|
Online |
| shinyhunters | 2024-04-23 | 2026-09-24 | 0 | 3 | 29 |
|
Online |
|
New
ImNotAVillain
|
2026-09-24 | 2026-09-24 | 0 | 2 | 2 |
|
Offline |
| secp0 | 2025-03-14 | 2026-09-22 | 0 | 1 | 1 |
|
Online |
| titan | 2026-04-14 | 2026-09-22 | 0 | 2 | 12 |
|
Online |
| BlackLocks | 2026-09-01 | 2026-09-22 | 0 | 2 | 3 |
|
Offline |
| unsafe | 2022-12-21 | 2026-09-21 | 0 | 2 | 9 |
|
Online |
| moneymessage | 2023-01-04 | 2026-09-21 | 0 | 1 | 4 |
|
Online |
| killsec | 2024-02-21 | 2026-09-18 | 0 | 0 | 5 |
|
Online |
| securotrop | 2025-06-11 | 2026-09-18 | 0 | 0 | 6 |
|
Offline |
| blacknevas | 2023-04-24 | 2026-09-17 | 0 | 0 | 12 |
|
Online |
| insomnia | 2025-02-14 | 2026-09-17 | 0 | 0 | 12 |
|
Online |
| ShadowByt3$ | 2026-02-17 | 2026-09-16 | 0 | 0 | 9 |
|
Offline |
| global | 2025-05-28 | 2026-09-12 | 0 | 0 | 6 |
|
Online |
| fulcrumsec | 2026-05-01 | 2026-09-11 | 0 | 0 | 2 |
|
Online |
| clop | 2020-03-13 | 2026-09-10 | 0 | 0 | 48 |
|
Online |
| embargo | 2024-04-17 | 2026-09-09 | 0 | 0 | 1 |
|
Online |
| kazu | 2025-11-06 | 2026-09-07 | 0 | 0 | 11 |
|
Online |
| DYSPHOR1A | 2026-08-20 | 2026-09-06 | 0 | 0 | 11 |
|
Offline |
|
New
VYPR
|
2026-09-05 | 2026-09-05 | 0 | 0 | 7 |
|
Offline |
| gunra | 2025-04-07 | 2026-09-04 | 0 | 0 | 7 |
|
Online |
| tridentlocker | 2025-10-21 | 2026-09-04 | 0 | 0 | 1 |
|
Offline |
| Falcon | 2026-07-14 | 2026-08-31 | 0 | 0 | 2 |
|
Offline |
| crypto24 | 2023-12-13 | 2026-08-31 | 0 | 0 | 1 |
|
Online |
| beast | 2023-12-19 | 2026-08-30 | 0 | 0 | 3 |
|
Offline |
| majinahanashi | 2026-08-12 | 2026-08-29 | 0 | 0 | 3 |
|
Offline |
| lynx | 2023-05-22 | 2026-08-27 | 0 | 0 | 3 |
|
Online |
| AiLock | 2015-04-29 | 2026-08-26 | 0 | 0 | 4 |
|
Offline |
| abyss | 2023-03-21 | 2026-08-26 | 0 | 0 | 1 |
|
Online |
| blackwater | 2026-03-20 | 2026-08-24 | 0 | 0 | 4 |
|
Online |
| coinbasecartel | 2023-05-26 | 2026-08-23 | 0 | 0 | 25 |
|
Offline |
| L Group | 2025-02-17 | 2026-08-22 | 0 | 0 | 2 |
|
Offline |
| xpl0itrs | 2026-06-12 | 2026-08-20 | 0 | 0 | 7 |
|
Offline |
| ZaWoo | 2026-07-06 | 2026-08-18 | 0 | 0 | 23 |
|
Offline |
| ms13089 | 2025-12-18 | 2026-08-15 | 0 | 0 | 1 |
|
Online |
| BlueWhale | 2026-08-08 | 2026-08-10 | 0 | 0 | 2 |
|
Offline |
| Sovcali | 2026-08-04 | 2026-08-04 | 0 | 0 | 1 |
|
Offline |
| Triple X | 2026-05-11 | 2026-08-04 | 0 | 0 | 1 |
|
Offline |
| CRPxO | 2026-07-09 | 2026-08-02 | 0 | 0 | 31 |
|
Offline |
| cmdorganization | 2026-01-25 | 2026-07-31 | 0 | 0 | 6 |
|
Online |
| orion | 2025-10-28 | 2026-07-27 | 0 | 0 | 1 |
|
Online |
| ExfilSquad | 2026-07-26 | 2026-07-26 | 0 | 0 | 15 |
|
Offline |
| nova | 2025-03-22 | 2026-07-25 | 0 | 0 | 9 |
|
Offline |
| apt73 | 2024-04-05 | 2026-07-24 | 0 | 0 | 1 |
|
Online |
| worldleaks | 2022-06-23 | 2026-07-21 | 0 | 0 | 2 |
|
Offline |
* First victim date uses estimated attack date when available, otherwise published date.