Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
| Group | First Victim * | Last Victim | Victims (7d) | Victims (30d) | Victims (90d) | Online |
|---|---|---|---|---|---|---|
| aurora | 2026-04-17 | 2026-07-29 | 1 | 2 | 13 | Online |
| gunra | 2025-04-07 | 2026-07-29 | 1 | 6 | 12 | Online |
|
New
Booba Project
|
2026-06-24 | 2026-07-28 | 4 | 8 | 11 | Offline |
| Deadlock | 2026-05-22 | 2026-07-28 | 18 | 85 | 95 | Offline |
| akira | 2023-04-12 | 2026-07-28 | 2 | 23 | 82 | Online |
| anubis | 2025-02-25 | 2026-07-28 | 2 | 11 | 24 | Online |
| blacknevas | 2023-04-24 | 2026-07-28 | 2 | 5 | 6 | Online |
| chaos | 2025-02-19 | 2026-07-28 | 5 | 16 | 30 | Online |
| cmdorganization | 2026-01-25 | 2026-07-28 | 2 | 12 | 38 | Online |
| coinbasecartel | 2023-05-26 | 2026-07-28 | 1 | 5 | 20 | Offline |
| incransom | 2023-08-06 | 2026-07-28 | 10 | 37 | 94 | Online |
| qilin | 2022-10-08 | 2026-07-28 | 33 | 122 | 311 | Offline |
| termite | 2023-05-11 | 2026-07-28 | 2 | 2 | 8 | Online |
| thegentlemen | 2023-02-28 | 2026-07-28 | 31 | 115 | 290 | Online |
|
New
CRPxO
|
2026-07-09 | 2026-07-27 | 20 | 26 | 26 | Offline |
|
New
Global Secret Group
|
2026-07-26 | 2026-07-27 | 31 | 31 | 31 | Offline |
| dragonforce | 2022-10-20 | 2026-07-27 | 5 | 39 | 122 | Online |
| safepay | 2023-11-10 | 2026-07-27 | 10 | 28 | 76 | Online |
| shinyhunters | 2024-04-23 | 2026-07-27 | 3 | 6 | 38 | Online |
|
New
ExfilSquad
|
2026-07-26 | 2026-07-26 | 15 | 15 | 15 | Offline |
|
New
Section9
|
2026-07-26 | 2026-07-26 | 18 | 18 | 18 | Offline |
| genesis | 2024-05-07 | 2026-07-26 | 6 | 15 | 42 | Online |
| m3rx | 2026-04-29 | 2026-07-26 | 4 | 10 | 28 | Online |
| nightspire | 2025-02-17 | 2026-07-26 | 2 | 11 | 53 | Online |
| arcusmedia | 2024-05-08 | 2026-07-25 | 2 | 8 | 8 | Offline |
| blackwater | 2026-03-20 | 2026-07-25 | 1 | 2 | 5 | Online |
| bravox | 2025-05-15 | 2026-07-25 | 1 | 2 | 11 | Online |
| kairos | 2024-06-26 | 2026-07-25 | 1 | 3 | 8 | Offline |
| moneymessage | 2023-01-04 | 2026-07-25 | 2 | 4 | 5 | Online |
| nova | 2025-03-22 | 2026-07-25 | 3 | 21 | 76 | Online |
| securotrop | 2025-06-11 | 2026-07-25 | 1 | 2 | 5 | Online |
| apt73 | 2023-11-01 | 2026-07-24 | 1 | 9 | 21 | Online |
| unsafe | 2022-12-21 | 2026-07-24 | 1 | 3 | 4 | Online |
| killsec | 2024-02-21 | 2026-07-23 | 3 | 3 | 8 | Online |
| krybit | 2026-03-30 | 2026-07-23 | 5 | 25 | 60 | Offline |
| payoutsking | 2025-04-17 | 2026-07-23 | 1 | 3 | 6 | Online |
| play | 2022-11-26 | 2026-07-23 | 2 | 14 | 39 | Offline |
| BrainCipher | 2024-07-01 | 2026-07-22 | 1 | 7 | 25 | Offline |
| morpheus | 2025-01-07 | 2026-07-21 | 0 | 2 | 6 | Offline |
| spacebears | 2024-04-25 | 2026-07-21 | 0 | 3 | 22 | Online |
| titan | 2026-04-14 | 2026-07-21 | 0 | 6 | 8 | Online |
| worldleaks | 2022-06-23 | 2026-07-21 | 0 | 6 | 20 | Offline |
| pear | 2023-08-18 | 2026-07-20 | 0 | 4 | 26 | Online |
|
New
Doommageddon
|
2026-03-08 | 2026-07-19 | 0 | 4 | 7 | Offline |
| blackout | 2024-02-26 | 2026-07-19 | 0 | 3 | 3 | Online |
| payload | 2026-02-17 | 2026-07-19 | 0 | 6 | 28 | Online |
| threeam | 2023-08-04 | 2026-07-18 | 0 | 2 | 15 | Online |
| interlock | 2023-12-01 | 2026-07-17 | 0 | 6 | 15 | Online |
| AiLock | 2015-04-29 | 2026-07-15 | 0 | 7 | 17 | Offline |
| Black X | 2025-05-07 | 2026-07-15 | 0 | 1 | 2 | Offline |
|
New
D1R
|
2026-07-13 | 2026-07-13 | 0 | 3 | 3 | Offline |
| ransomhouse | 2021-06-01 | 2026-07-13 | 0 | 3 | 8 | Online |
| settra | 2026-06-02 | 2026-07-13 | 0 | 6 | 31 | Online |
| medusalocker | 2021-11-03 | 2026-07-07 | 0 | 11 | 26 | Online |
| Wallstreet | 2026-06-16 | 2026-07-04 | 0 | 4 | 5 | Offline |
| Blackfield | 2026-06-29 | 2026-07-03 | 0 | 1 | 2 | Offline |
| lockbit5 | 2023-04-17 | 2026-07-03 | 0 | 1 | 46 | Online |
| stormous | 2022-03-22 | 2026-07-01 | 0 | 1 | 24 | Offline |
| embargo | 2024-04-17 | 2026-06-30 | 0 | 1 | 2 | Online |
| Redact | 2026-06-28 | 2026-06-28 | 0 | 0 | 2 | Offline |
| insomnia | 2025-02-14 | 2026-06-25 | 0 | 0 | 4 | Online |
| Icarus | 2026-05-05 | 2026-06-23 | 0 | 0 | 12 | Offline |
| lapsus$ | 2021-12-10 | 2026-06-23 | 0 | 0 | 5 | Online |
| ransomexx | 2020-05-14 | 2026-06-20 | 0 | 0 | 1 | Offline |
| cloak | 2023-08-24 | 2026-06-18 | 0 | 0 | 4 | Offline |
| lynx | 2023-05-22 | 2026-06-18 | 0 | 0 | 12 | Online |
| rhysida | 2023-06-05 | 2026-06-18 | 0 | 0 | 4 | Online |
| SilentRansomGroup | 2022-06-07 | 2026-06-17 | 0 | 0 | 5 | Offline |
| lamashtu | 2026-04-11 | 2026-06-17 | 0 | 0 | 17 | Online |
| fulcrumsec | 2026-05-01 | 2026-06-16 | 0 | 0 | 25 | Offline |
| shadowbyt3$ | 2026-04-01 | 2026-06-16 | 0 | 0 | 10 | Offline |
| AuditTeam | 2026-02-21 | 2026-06-15 | 0 | 0 | 10 | Offline |
| direwolf | 2025-04-17 | 2026-06-12 | 0 | 0 | 4 | Online |
| ULose | 2026-06-09 | 2026-06-09 | 0 | 0 | 5 | Offline |
| PrinzEugen | 2026-02-27 | 2026-06-04 | 0 | 0 | 4 | Offline |
| nitrogen | 2023-03-29 | 2026-06-03 | 0 | 0 | 2 | Offline |
| abyss | 2023-03-21 | 2026-06-01 | 0 | 0 | 3 | Online |
| 0day Syndicate | 2026-05-28 | 2026-05-29 | 0 | 0 | 5 | Offline |
| everest | 2021-09-09 | 2026-05-29 | 0 | 0 | 16 | Offline |
| Triple X | 2026-05-11 | 2026-05-12 | 0 | 0 | 3 | Offline |
| LeakBazaar | 2026-04-13 | 2026-05-09 | 0 | 0 | 5 | Offline |
| ms13089 | 2025-12-18 | 2026-05-05 | 0 | 0 | 1 | Online |
| sinobi | 2025-03-24 | 2026-05-05 | 0 | 0 | 6 | Offline |
| mnt6 | 2026-04-30 | 2026-05-02 | 0 | 0 | 2 | Offline |
| clop | 2020-03-13 | 2026-05-01 | 0 | 0 | 2 | Offline |
* First victim date uses estimated attack date when available, otherwise published date.