State now. Since yesterday: +2 tier promotions, 0 known-exploited vulnerability additions, 4 leak-site claims, and 4 confirmed breaches.
Why today matters ·
Incidents
Threat actors
Explore threat actors with claim-backed profiles and reporting-only profiles kept visibly separate.
Why now: this site build separates 354 claim-backed profiles from 13 profiles seen in news reporting only.
354 claim-backed actor profiles, all time9 of all 354 listed profiles with a verified MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) mapping13 profiles seen in news reporting only, all time
How the two lists differ
Two lists. The table lists groups tracked from claims posted on leak sites, under the group's own name or a leak-site brand, including groups with no surviving claims; the kind column reads ransomware, extortion, or not stated. Below it, actors that appear only in news stories (for example state-aligned espionage groups) are listed separately, because we hold no direct evidence about them.
What changed
Which leak-site groups had more or fewer claims dated in the latest 7 days than in the 7 days before. Open the daily comparison for newly observed leak-site claims and other material tracker changes.
Dated leak-site claims this tracker collected per group for 2026-10-30 through 2026-11-05, Coordinated Universal Time (UTC), compared with 2026-10-23 through 2026-10-29.
How these are counted
The last column counts claims dated in the 24 hours before the data export; a claim stored with a date but no time counts when that date is today or yesterday. Claims are unverified, claims without a disclosure date are left out of every column, and "unknown" collects claims with no attributed group.
| Group | Claims, latest 7 days | Prior 7 days | Change | Last 24 hours |
|---|---|---|---|---|
| The Gentlemen | 38 | 54 | Down 30% | 1 |
| N0n | 29 | 18 | Up 61% | 10 |
| Qilin | 27 | 42 | Down 36% | 2 |
| Soul | 25 | 0 | Up from none in the prior 7 days | 0 |
| Safepay | 18 | 9 | +9 from 9 | 0 |
| Medusalocker | 17 | 0 | Up from none in the prior 7 days | 0 |
| Akira | 15 | 6 | +9 from 6 | 4 |
| Brain Cipher | 11 | 0 | Up from none in the prior 7 days | 0 |
| Braincipher | 11 | 0 | Up from none in the prior 7 days | 0 |
| Leakeddata | 10 | 7 | +3 from 7 | 2 |
Showing 10 of 65 groups with a dated claim in these windows, ordered by claims in the latest 7 days, so groups that went quiet sort last. Download the data (JSON).
33 leak-site claims were posted in the last 24 hours, and 347 were posted in the 7 whole days 2026-10-30 through 2026-11-05 (UTC).
Actors with leak-site claims (354)
| Actor | Kind | Most-claimed sectors | ATT&CK | Claims | Latest observed leak-site post |
|---|---|---|---|---|---|
| N0n | ransomware | Transportation & LogisticsRetailTechnology +2 moreHealthcareManufacturing | not yet mapped | 210 | |
| Vexyaka vexy-ransomware, Vexy Ransomware | ransomware | TechnologyManufacturingRetail +2 moreConstruction & EngineeringEducation | not yet mapped | 30 | |
| Leakeddata | ransomware | LegalInsuranceBusiness & Professional Services +2 moreFinancial ServicesHospitality | not yet mapped | 251 | |
| Qilin | ransomware | ManufacturingBusiness & Professional ServicesConstruction & Engineering +2 moreHealthcareRetail | G1050 · 3 techniques | 2,459 | |
| Redact | ransomware | Business & Professional ServicesEnergy & UtilitiesPharmaceuticals & Life Sciences +2 moreHospitalityInsurance | not yet mapped | 11 | |
| Akira | ransomware | ManufacturingConstruction & EngineeringBusiness & Professional Services +2 moreLegalRetail | G1024 · 17 techniques | 1,877 | |
| Beast | ransomware | HealthcareManufacturingConstruction & Engineering +2 moreBusiness & Professional ServicesEducation | not yet mapped | 74 | |
| Aoqin | ransomware | TechnologyBusiness & Professional ServicesEnergy & Utilities +1 moreManufacturing | not yet mapped | 5 | |
| Pear | ransomware | HealthcareLegalBusiness & Professional Services +2 moreConstruction & EngineeringTechnology | not yet mapped | 189 | |
| Byod | ransomware | EducationRetailBusiness & Professional Services +2 moreFinancial ServicesHospitality | not yet mapped | 17 | |
| Everstake | ransomware | ManufacturingBusiness & Professional ServicesInsurance +2 moreTechnologyTransportation & Logistics | not yet mapped | 15 | |
| Audit Team | ransomware | GovernmentManufacturingBusiness & Professional Services +2 moreMedia & EntertainmentConstruction & Engineering | not yet mapped | 60 | |
| AuditTeam | ransomware | TechnologyBusiness & Professional ServicesFinancial Services +1 moreTransportation & Logistics | not yet mapped | 32 | |
| PixelLeaks | ransomware | Technology | not yet mapped | 2 | |
| Dark Project | ransomware | Construction & EngineeringHealthcareManufacturing +2 moreRetailTransportation & Logistics | not yet mapped | 41 | |
| Destello | ransomware | Financial ServicesInsurance | not yet mapped | 2 | |
| The Gentlemenaka thegentlemen | ransomware | ManufacturingTechnologyHealthcare +2 moreConstruction & EngineeringRetail | not yet mapped | 1,320 | |
| Majinahanashi | ransomware | HospitalityManufacturingRetail +2 moreConstruction & EngineeringEnergy & Utilities | not yet mapped | 45 | |
| LockBitaka lockbit5, lockbit3 | ransomware | ManufacturingHealthcareConstruction & Engineering +2 moreEducationGovernment | not yet mapped | 4,688 | |
| Medusalocker | ransomware | ManufacturingTechnologyRetail +2 moreAgricultureBusiness & Professional Services | not yet mapped | 42 | |
| Ransomhouse | ransomware | HealthcareManufacturingGovernment +2 moreConstruction & EngineeringEnergy & Utilities | not yet mapped | 276 | |
| SilentRansomGroup | ransomware | Business & Professional Services | not yet mapped | 72 | |
| BrainCipher | ransomware | Business & Professional ServicesHealthcareTechnology +2 moreFinancial ServicesAgriculture | not yet mapped | 40 | |
| Play | ransomware | ManufacturingConstruction & EngineeringRetail +2 moreTechnologyBusiness & Professional Services | G1040 · 26 techniques | 1,326 | |
| Whitearmor | ransomware | Transportation & LogisticsFinancial ServicesTechnology +2 moreHospitalityManufacturing | not yet mapped | 27 | |
| Soul | ransomware | HealthcareManufacturingBusiness & Professional Services +2 moreConstruction & EngineeringLegal | not yet mapped | 25 | |
| Brain Cipher | ransomware | Business & Professional ServicesHealthcareFinancial Services +2 moreManufacturingInsurance | not yet mapped | 136 | |
| Safepay | ransomware | ManufacturingConstruction & EngineeringBusiness & Professional Services +2 moreEducationHealthcare | not yet mapped | 631 | |
| Global Secret Group | ransomware | ManufacturingTechnologyBusiness & Professional Services +2 moreRetailEducation | not yet mapped | 64 | |
| Rhysida | ransomware | EducationHealthcareManufacturing +2 moreGovernmentTechnology | not yet mapped | 318 | |
| Interlock | ransomware | EducationHealthcareManufacturing +2 moreGovernmentConstruction & Engineering | not yet mapped | 175 | |
| Scarlettgroup | ransomware | EducationHealthcareBusiness & Professional Services +2 moreFinancial ServicesGovernment | not yet mapped | 12 | |
| Doommageddon | ransomware | ManufacturingHealthcareReal Estate +2 moreTransportation & LogisticsAutomotive | not yet mapped | 21 | |
| Payoutsking | ransomware | ManufacturingBusiness & Professional ServicesHealthcare +2 moreTechnologyConstruction & Engineering | not yet mapped | 136 | |
| INC Ransomaka incransom | ransomware | HealthcareLegalManufacturing +2 moreEducationGovernment | G1032 · 25 techniques | 982 | |
| Chaos | ransomware | ManufacturingBusiness & Professional ServicesTransportation & Logistics +2 moreConstruction & EngineeringHealthcare | not yet mapped | 99 | |
| Falcon | ransomware | LegalHealthcareEnergy & Utilities +2 moreManufacturingPharmaceuticals & Life Sciences | not yet mapped | 9 | |
| Booba Teamaka booba-project, Booba Project | ransomware | HealthcareGovernmentBusiness & Professional Services +2 moreEducationManufacturing | not yet mapped | 67 | |
| Orova | ransomware | ManufacturingHealthcareBusiness & Professional Services +2 moreRetailTechnology | not yet mapped | 84 | |
| OBSOFT | ransomware | Not reported | not yet mapped | 2 | |
| Payload | ransomware | ManufacturingConstruction & EngineeringRetail +2 moreHealthcareTechnology | not yet mapped | 92 | |
| Nightspire | ransomware | ManufacturingHealthcareBusiness & Professional Services +2 moreConstruction & EngineeringTransportation & Logistics | not yet mapped | 438 | |
| Hyflock | ransomware | ManufacturingPharmaceuticals & Life SciencesGovernment +2 moreHealthcareHospitality | not yet mapped | 20 | |
| Leaknet | ransomware | HealthcareConstruction & EngineeringInsurance +2 moreFinancial ServicesGovernment | not yet mapped | 98 | |
| Shiba | ransomware | HealthcareConstruction & EngineeringAgriculture +2 moreBusiness & Professional ServicesEducation | not yet mapped | 10 | |
| Direwolf | ransomware | HealthcareManufacturingBusiness & Professional Services +2 moreLegalTransportation & Logistics | not yet mapped | 145 | |
| Barracuda | ransomware | ManufacturingHealthcareTechnology +2 moreAgricultureEnergy & Utilities | not yet mapped | 15 | |
| Emperador | ransomware | ManufacturingTransportation & LogisticsTechnology +2 moreEducationGovernment | not yet mapped | 67 | |
| Sarcoma | ransomware | ManufacturingConstruction & EngineeringRetail +2 moreBusiness & Professional ServicesTransportation & Logistics | not yet mapped | 146 | |
| Deadlock | ransomware | ManufacturingBusiness & Professional ServicesConstruction & Engineering +2 moreTransportation & LogisticsFinancial Services | not yet mapped | 198 | |
| Genesis | ransomware | HealthcareConstruction & EngineeringBusiness & Professional Services +2 moreLegalFinancial Services | not yet mapped | 140 | |
| Wallstreet | ransomware | HealthcareManufacturingConstruction & Engineering +2 moreGovernmentEducation | not yet mapped | 47 | |
| Aurora | ransomware | ManufacturingConstruction & EngineeringRetail +2 moreBusiness & Professional ServicesLegal | not yet mapped | 57 | |
| DragonForce | ransomware | Construction & EngineeringManufacturingBusiness & Professional Services +2 moreRetailHealthcare | not yet mapped | 932 | |
| KryBit | ransomware | ManufacturingBusiness & Professional ServicesHealthcare +2 moreRetailTransportation & Logistics | not yet mapped | 171 | |
| Anubis | ransomware | HealthcareLegalManufacturing +2 moreConstruction & EngineeringBusiness & Professional Services | not yet mapped | 125 | |
| Panzer | ransomware | TechnologyManufacturingBusiness & Professional Services +2 moreEducationGovernment | not yet mapped | 68 | |
| Everest | ransomware | HealthcareFinancial ServicesLegal +2 moreEnergy & UtilitiesBusiness & Professional Services | not yet mapped | 539 | |
| Crypto24 | ransomware | ManufacturingTechnologyHealthcare +2 moreHospitalityLegal | not yet mapped | 53 | |
| Ulose | ransomware | Financial ServicesAerospace & DefenseHealthcare | not yet mapped | 10 | |
| Metaencryptor | ransomware | ManufacturingHealthcareBusiness & Professional Services +2 moreAutomotiveEnergy & Utilities | not yet mapped | 80 | |
| Securotrop | ransomware | ManufacturingConstruction & EngineeringRetail +2 moreBusiness & Professional ServicesLegal | not yet mapped | 42 | |
| Cloak | ransomware | GovernmentHealthcareFinancial Services +2 moreConstruction & EngineeringEnergy & Utilities | not yet mapped | 157 | |
| Lamashtu | ransomware | ManufacturingBusiness & Professional ServicesRetail +2 moreAgricultureHealthcare | not yet mapped | 58 | |
| Fulcrumsec | ransomware | TechnologyHealthcareMedia & Entertainment +2 moreRetailBusiness & Professional Services | not yet mapped | 31 | |
| Bravox | ransomware | ManufacturingHealthcareConstruction & Engineering +2 moreRetailTechnology | not yet mapped | 46 | |
| Space Bearsaka spacebears | ransomware | ManufacturingHealthcareBusiness & Professional Services +2 moreConstruction & EngineeringTechnology | not yet mapped | 170 | |
| Helix | ransomware | ManufacturingReal EstateTransportation & Logistics +2 moreBusiness & Professional ServicesEnergy & Utilities | not yet mapped | 22 | |
| Clop | ransomware | RetailBusiness & Professional ServicesManufacturing +2 moreTechnologyFinancial Services | not yet mapped | 2,351 | |
| Sovcali | ransomware | AutomotiveConsumer Services | not yet mapped | 9 | |
| Mimori | ransomware | Technology | not yet mapped | 2 | |
| Storm | ransomware | ManufacturingFinancial ServicesHealthcare +2 moreBusiness & Professional ServicesRetail | not yet mapped | 146 | |
| Iah647aka iah6477 | ransomware | ManufacturingReal EstateFinancial Services +1 moreRetail | not yet mapped | 18 | |
| Eclipse | ransomware | Transportation & LogisticsManufacturingMedia & Entertainment +2 morePharmaceuticals & Life SciencesTechnology | not yet mapped | 22 | |
| The Seven Deadly Sins | ransomware | TechnologyHealthcareRetail +1 moreGovernment | not yet mapped | 14 | |
| 0x00 | ransomware | Not reported | not yet mapped | 1 | |
| Black Nevasaka blacknevas | ransomware | ManufacturingRetailTechnology +2 moreHealthcareEducation | not yet mapped | 59 | |
| Kairos | ransomware | HealthcareEducationLegal +2 moreManufacturingGovernment | not yet mapped | 138 | |
| Exitium | ransomware | HealthcareManufacturingAgriculture +1 moreGovernment | not yet mapped | 9 | |
| Umbra | ransomware | EducationTechnologyAgriculture +2 moreEnergy & UtilitiesRetail | not yet mapped | 10 | |
| Threeam | ransomware | ManufacturingBusiness & Professional ServicesTechnology +2 moreEducationHealthcare | not yet mapped | 13 | |
| Black X | ransomware | Financial ServicesHealthcareManufacturing +2 morePharmaceuticals & Life SciencesAutomotive | not yet mapped | 22 | |
| Arcusmedia | ransomware | TechnologyBusiness & Professional ServicesManufacturing +2 moreAgricultureGovernment | not yet mapped | 19 | |
| Termite | ransomware | HealthcareManufacturingBusiness & Professional Services +2 moreEducationFinancial Services | not yet mapped | 58 | |
| Arcus Media | ransomware | TechnologyBusiness & Professional ServicesTransportation & Logistics +2 moreRetailConstruction & Engineering | not yet mapped | 120 | |
| Cry0 | ransomware | Energy & UtilitiesLegalManufacturing +1 moreTransportation & Logistics | not yet mapped | 6 | |
| Netrunner | ransomware | HealthcareAgricultureConsumer Services +2 moreRetailTelecommunications | not yet mapped | 12 | |
| RunSomeWaresaka runsomewares | ransomware | HealthcareBusiness & Professional ServicesFinancial Services +1 moreManufacturing | not yet mapped | 7 | |
| Vypr | ransomware | EducationHealthcareManufacturing +1 moreConstruction & Engineering | not yet mapped | 10 | |
| 3am | ransomware | HealthcareBusiness & Professional ServicesManufacturing +2 moreAgricultureConstruction & Engineering | not yet mapped | 105 | |
| EndZone | ransomware | TelecommunicationsBusiness & Professional ServicesEducation +2 moreGovernmentTechnology | not yet mapped | 8 | |
| Insomnia | ransomware | HealthcareLegalManufacturing +2 moreFinancial ServicesHospitality | not yet mapped | 53 | |
| Spirals | ransomware | HealthcareTransportation & LogisticsBusiness & Professional Services +2 moreFinancial ServicesManufacturing | not yet mapped | 11 | |
| ShinyHunters | extortion | Business & Professional ServicesEducationFinancial Services +2 moreRetailTechnology | G1057 · 46 techniques | 239 | |
| Morpheus | ransomware | ManufacturingBusiness & Professional ServicesLegal +2 moreTechnologyFinancial Services | not yet mapped | 37 | |
| M3rx | ransomware | ManufacturingTechnologyBusiness & Professional Services +2 moreConstruction & EngineeringTransportation & Logistics | not yet mapped | 45 | |
| Gammax | ransomware | AgricultureConstruction & EngineeringConsumer Services +2 moreEducationNonprofit | not yet mapped | 6 | |
| Vladivostok | ransomware | Not reported | not yet mapped | 1 | |
| Imnotavillian | ransomware | Manufacturing | not yet mapped | 11 | |
| Global Cybernetic Collective | ransomware | Business & Professional ServicesConstruction & EngineeringEducation +2 moreGovernmentHealthcare | not yet mapped | 7 | |
| Killsec3 | ransomware | HealthcareFinancial ServicesBusiness & Professional Services +2 moreTechnologyManufacturing | not yet mapped | 448 | |
| BlackLockaka el-dorado, el dorado | ransomware | Construction & EngineeringBusiness & Professional ServicesManufacturing +2 moreAutomotiveGovernment | not yet mapped | 121 | |
| ImNotAVillain | ransomware | Government | not yet mapped | 1 | |
| Zawoo | ransomware | ManufacturingConstruction & EngineeringBusiness & Professional Services +2 moreReal EstateHospitality | not yet mapped | 26 | |
| Titan | ransomware | HealthcareBusiness & Professional ServicesConstruction & Engineering +2 moreManufacturingAgriculture | not yet mapped | 38 | |
| Secp0 | ransomware | TelecommunicationsBusiness & Professional ServicesLegal +2 moreManufacturingReal Estate | not yet mapped | 14 | |
| Unsafe | ransomware | TechnologyEducationHospitality +2 moreHealthcareManufacturing | not yet mapped | 30 | |
| Moneymessage | ransomware | Energy & UtilitiesHealthcareTransportation & Logistics | not yet mapped | 4 | |
| Money Message | ransomware | HealthcareTransportation & LogisticsManufacturing +2 moreNonprofitEducation | not yet mapped | 39 | |
| Killsec | ransomware | Financial ServicesHealthcareGovernment +2 moreTransportation & LogisticsInsurance | not yet mapped | 68 | |
| ShadowByt3$ | ransomware | EducationHospitalityRetail +2 moreTechnologyAgriculture | not yet mapped | 49 | |
| Global | ransomware | HealthcareConstruction & EngineeringGovernment +2 moreAgricultureAutomotive | not yet mapped | 36 | |
| Embargo | ransomware | Construction & EngineeringHealthcareFinancial Services +2 moreTechnologyTransportation & Logistics | not yet mapped | 45 | |
| Kazu | ransomware | GovernmentHealthcareEducation +2 moreBusiness & Professional ServicesNonprofit | not yet mapped | 70 | |
| DYSPHOR1A | ransomware | EducationGovernmentBusiness & Professional Services +2 moreFinancial ServicesTelecommunications | not yet mapped | 16 | |
| Tridentlocker | ransomware | Energy & UtilitiesGovernmentHospitality +2 moreLegalTechnology | not yet mapped | 17 | |
| Gunra | ransomware | ManufacturingHealthcareBusiness & Professional Services +2 moreInsurancePharmaceuticals & Life Sciences | not yet mapped | 61 | |
| Meowciety403 | ransomware | Financial Services | not yet mapped | 3 | |
| Coinbase Cartel | ransomware | TechnologyManufacturingBusiness & Professional Services +2 moreRetailFinancial Services | not yet mapped | 361 | |
| Lynx | ransomware | ManufacturingConstruction & EngineeringBusiness & Professional Services +2 moreLegalRetail | not yet mapped | 418 | |
| Abyss-dataaka abyss | ransomware | HealthcareConstruction & EngineeringRetail +2 moreFinancial ServicesInsurance | not yet mapped | 92 | |
| Ailock | ransomware | ManufacturingBusiness & Professional ServicesConstruction & Engineering +2 moreRetailTechnology | not yet mapped | 51 | |
| Blackwater | ransomware | HealthcareAutomotiveEnergy & Utilities +2 moreHospitalityManufacturing | not yet mapped | 12 | |
| Cyberleek | ransomware | Media & EntertainmentHospitality | not yet mapped | 12 | |
| Coinbasecartel | ransomware | Business & Professional ServicesFinancial ServicesManufacturing +2 moreAgricultureHealthcare | not yet mapped | 29 | |
| L Group | ransomware | Business & Professional ServicesRetailAgriculture +2 moreConstruction & EngineeringManufacturing | not yet mapped | 28 | |
| Xpl0itrs | ransomware | EducationRetailTechnology +2 moreAutomotiveFinancial Services | not yet mapped | 11 | |
| Ms13-089aka ms13089 | ransomware | Transportation & LogisticsBusiness & Professional ServicesLegal +1 moreNonprofit | not yet mapped | 6 | |
| Bluewhale | ransomware | Media & EntertainmentTechnology | not yet mapped | 2 | |
| Crpx0 | ransomware | HealthcareFinancial ServicesTechnology +2 moreBusiness & Professional ServicesInsurance | not yet mapped | 47 | |
| Settra | ransomware | Construction & EngineeringManufacturingBusiness & Professional Services +2 moreRetailAgriculture | not yet mapped | 36 | |
| Kraken | ransomware | LegalTelecommunicationsConstruction & Engineering +2 moreFinancial ServicesRetail | not yet mapped | 28 | |
| Ethics | ransomware | InsuranceLegalTechnology | not yet mapped | 4 | |
| Orion | ransomware | ManufacturingAutomotiveFinancial Services +2 moreLegalPharmaceuticals & Life Sciences | not yet mapped | 18 | |
| Triple X | ransomware | Financial ServicesLegal | not yet mapped | 4 | |
| CRPxO | ransomware | Financial ServicesHealthcareTechnology +2 moreBusiness & Professional ServicesManufacturing | not yet mapped | 31 | |
| Cmd Organization | ransomware | HealthcareManufacturingConstruction & Engineering +2 moreEducationRetail | not yet mapped | 74 | |
| Cmdorganization | ransomware | Energy & UtilitiesBusiness & Professional ServicesEducation +2 moreHealthcareManufacturing | not yet mapped | 10 | |
| ExfilSquad | ransomware | GovernmentEducationTechnology +2 moreBusiness & Professional ServicesConstruction & Engineering | not yet mapped | 24 | |
| Section9 | ransomware | Energy & UtilitiesHospitality | not yet mapped | 3 | |
| Nova | ransomware | TechnologyManufacturingEducation +2 moreHealthcareGovernment | not yet mapped | 187 | |
| EraLeign (APT73) | ransomware | Financial ServicesGovernmentTechnology +2 moreRetailManufacturing | not yet mapped | 234 | |
| Apt73 | ransomware | Technology | not yet mapped | 1 | |
| Worldleaks | extortion | HealthcareManufacturingLegal +2 moreEducationRetail | not yet mapped | 180 | |
| Blackout | ransomware | TechnologyHealthcareManufacturing +2 moreRetailTelecommunications | not yet mapped | 16 | |
| Syndicate | ransomware | Financial Services | not yet mapped | 1 | |
| D1r | ransomware | TechnologyAutomotiveManufacturing | not yet mapped | 8 | |
| Dataleak | ransomware | ManufacturingInsuranceBusiness & Professional Services | not yet mapped | 11 | |
| Stormous | ransomware | HospitalityRetailBusiness & Professional Services +2 moreGovernmentFinancial Services | not yet mapped | 230 | |
| Bavacai | ransomware | EducationGovernmentLegal +2 moreNonprofitRetail | not yet mapped | 28 | |
| Prinz Eugen | ransomware | Consumer ServicesFinancial ServicesHealthcare | not yet mapped | 6 | |
| Icarus | ransomware | Business & Professional ServicesFinancial ServicesTechnology | not yet mapped | 13 | |
| Ransomexx | ransomware | ManufacturingTelecommunicationsTransportation & Logistics +2 moreGovernmentTechnology | not yet mapped | 76 | |
| Blackbyte-crux | ransomware | Business & Professional ServicesPharmaceuticals & Life SciencesFinancial Services +2 moreMedia & EntertainmentNonprofit | not yet mapped | 11 | |
| Nitrogen | ransomware | ManufacturingConstruction & EngineeringAutomotive +2 moreEnergy & UtilitiesHospitality | not yet mapped | 48 | |
| Spy Corporate | ransomware | Legal | not yet mapped | 1 | |
| Leak Bazaar | ransomware | Aerospace & DefenseAutomotiveConstruction & Engineering +2 moreHealthcareTechnology | not yet mapped | 10 | |
| Sinobi | ransomware | ManufacturingConstruction & EngineeringHealthcare +2 moreBusiness & Professional ServicesTechnology | not yet mapped | 259 | |
| Mnt6 | ransomware | Construction & EngineeringManufacturingTechnology | not yet mapped | 3 | |
| Radar | ransomware | Construction & EngineeringFinancial ServicesManufacturing +2 moreReal EstateRetail | not yet mapped | 24 | |
| Medusa | ransomware | HealthcareConstruction & EngineeringEducation +2 moreManufacturingGovernment | G1051 · 57 techniques | 537 | |
| Vect | ransomware | TechnologyFinancial ServicesHealthcare +2 moreManufacturingBusiness & Professional Services | not yet mapped | 27 | |
| Nasir Security | ransomware | Energy & UtilitiesGovernmentBusiness & Professional Services +2 moreNonprofitTransportation & Logistics | not yet mapped | 13 | |
| Timc | ransomware | Business & Professional ServicesPharmaceuticals & Life Sciences | not yet mapped | 3 | |
| Lapsus$ | ransomware | GovernmentRetailAerospace & Defense +2 moreConstruction & EngineeringEducation | G1004 · 43 techniques | 14 | |
| Linkc | ransomware | TechnologyAerospace & DefenseManufacturing | not yet mapped | 7 | |
| Bqtlock | ransomware | HospitalityTechnologyEducation +2 moreGovernmentHealthcare | not yet mapped | 11 | |
| Threatmarket | ransomware | Aerospace & Defense | not yet mapped | 1 | |
| Cipherforce | ransomware | Business & Professional ServicesTechnologyTelecommunications +2 moreAutomotiveFinancial Services | not yet mapped | 12 | |
| Alp-001 | ransomware | AgricultureTechnology | not yet mapped | 3 | |
| Kyber | ransomware | Aerospace & Defense | not yet mapped | 1 | |
| Handala | ransomware | GovernmentTechnologyAerospace & Defense +2 moreEnergy & UtilitiesMedia & Entertainment | not yet mapped | 176 | |
| Loki | ransomware | Financial Services | not yet mapped | 1 | |
| Tengu | ransomware | TechnologyConstruction & EngineeringManufacturing +2 moreAutomotiveHospitality | not yet mapped | 52 | |
| Xp95 | ransomware | Healthcare | not yet mapped | 1 | |
| Mydata | ransomware | HealthcareManufacturingEnergy & Utilities +2 moreAutomotiveBusiness & Professional Services | not yet mapped | 27 | |
| Kittykatkrew | ransomware | Not reported | not yet mapped | 3 | |
| Atomsilo | ransomware | Financial ServicesPharmaceuticals & Life Sciences | not yet mapped | 5 | |
| Ciphbit | ransomware | Construction & EngineeringHealthcareManufacturing +2 moreAutomotiveBusiness & Professional Services | not yet mapped | 36 | |
| Reynolds | ransomware | Financial Services | not yet mapped | 1 | |
| The Green Blood Group | ransomware | GovernmentManufacturing | not yet mapped | 2 | |
| Devman2 | ransomware | HealthcareGovernmentFinancial Services +2 moreMedia & EntertainmentConstruction & Engineering | not yet mapped | 225 | |
| Benzona | ransomware | AutomotiveHealthcareHospitality | not yet mapped | 14 | |
| Lynxr | ransomware | Pharmaceuticals & Life Sciences | not yet mapped | 3 | |
| Blackshrantac | ransomware | GovernmentTechnologyBusiness & Professional Services +2 moreEnergy & UtilitiesLegal | not yet mapped | 42 | |
| Obscura | ransomware | Energy & UtilitiesHealthcareBusiness & Professional Services +2 moreTechnologyTransportation & Logistics | not yet mapped | 34 | |
| Osiris | ransomware | Agriculture | not yet mapped | 2 | |
| Toufan | ransomware | Construction & EngineeringLegalAerospace & Defense +2 moreInsuranceHospitality | not yet mapped | 40 | |
| Brotherhood | ransomware | NonprofitAgricultureBusiness & Professional Services +2 moreConstruction & EngineeringManufacturing | not yet mapped | 23 | |
| Sicari | ransomware | Manufacturing | not yet mapped | 1 | |
| Walocker | ransomware | GovernmentEnergy & UtilitiesFinancial Services +2 moreManufacturingAgriculture | not yet mapped | 22 | |
| Ransomware Blog | ransomware | ManufacturingBusiness & Professional ServicesConstruction & Engineering +2 moreFinancial ServicesHospitality | not yet mapped | 61 | |
| Warlock | ransomware | ManufacturingTechnologyFinancial Services +2 moreConstruction & EngineeringTelecommunications | not yet mapped | 79 | |
| Minteye | ransomware | Construction & EngineeringAgricultureLegal +1 moreTransportation & Logistics | not yet mapped | 5 | |
| Root | ransomware | Financial ServicesHospitalityManufacturing +2 moreReal EstateTechnology | not yet mapped | 9 | |
| Datacarry | ransomware | HealthcareConsumer ServicesFinancial Services +2 moreInsuranceNonprofit | not yet mapped | 16 | |
| Silent | ransomware | Aerospace & DefenseLegalTechnology +1 moreTransportation & Logistics | not yet mapped | 13 | |
| J Group | ransomware | Business & Professional ServicesConstruction & EngineeringManufacturing +2 moreAerospace & DefenseAgriculture | not yet mapped | 42 | |
| Kryptos | ransomware | Construction & EngineeringFinancial ServicesLegal +2 moreEducationHealthcare | not yet mapped | 8 | |
| Radiant Group | ransomware | Transportation & LogisticsConsumer ServicesEducation +2 moreHealthcareRetail | not yet mapped | 8 | |
| Scattered Lapsus$ Hunters | ransomware | RetailTransportation & LogisticsTechnology +2 moreAutomotiveEnergy & Utilities | not yet mapped | 51 | |
| Nullbulge | ransomware | Media & EntertainmentFinancial ServicesTechnology | not yet mapped | 11 | |
| Trinity | ransomware | HealthcareBusiness & Professional ServicesEducation +2 moreFinancial ServicesGovernment | not yet mapped | 19 | |
| Qilin-securotrop | ransomware | Construction & EngineeringManufacturingRetail +1 moreTelecommunications | not yet mapped | 22 | |
| Arachna Leak | ransomware | HealthcareRetail | not yet mapped | 2 | |
| Miga | ransomware | RetailEducation | not yet mapped | 6 | |
| Lunalock | ransomware | Telecommunications | not yet mapped | 2 | |
| Imn Crew | ransomware | ManufacturingAutomotiveBusiness & Professional Services +2 moreGovernmentHealthcare | not yet mapped | 12 | |
| Daixin | ransomware | HealthcareEnergy & UtilitiesManufacturing +2 moreMedia & EntertainmentAutomotive | not yet mapped | 22 | |
| Yurei | ransomware | ManufacturingHospitality | not yet mapped | 3 | |
| Cicada3301 | ransomware | ManufacturingBusiness & Professional ServicesConstruction & Engineering +2 moreHospitalityTechnology | not yet mapped | 78 | |
| Desolator | ransomware | Construction & EngineeringTechnology | not yet mapped | 4 | |
| Cephalus | ransomware | LegalHealthcareTechnology +2 moreBusiness & Professional ServicesConstruction & Engineering | not yet mapped | 26 | |
| D4rk4rmy | ransomware | Financial ServicesBusiness & Professional ServicesHospitality +2 moreLegalManufacturing | not yet mapped | 26 | |
| Apos | ransomware | Business & Professional ServicesFinancial ServicesRetail +2 moreAerospace & DefenseHealthcare | not yet mapped | 16 | |
| Team Underground | ransomware | Pharmaceuticals & Life SciencesConstruction & EngineeringManufacturing +2 moreTechnologyBusiness & Professional Services | not yet mapped | 27 | |
| Weyhro | ransomware | ManufacturingFinancial ServicesLegal +2 moreBusiness & Professional ServicesConstruction & Engineering | not yet mapped | 14 | |
| Ransomedvc2 | ransomware | Consumer ServicesEducationRetail | not yet mapped | 4 | |
| Teamxxx | ransomware | HealthcareAgricultureAutomotive +2 moreFinancial ServicesLegal | not yet mapped | 11 | |
| Fsociety | ransomware | Financial ServicesGovernmentEducation +2 moreLegalBusiness & Professional Services | not yet mapped | 62 | |
| Blackbyte | ransomware | ManufacturingAutomotiveGovernment +2 morePharmaceuticals & Life SciencesAgriculture | G1043 · 48 techniques | 134 | |
| Kawa | ransomware | Business & Professional ServicesHealthcareInsurance +2 moreManufacturingNonprofit | not yet mapped | 11 | |
| Satanlock | ransomware | GovernmentHealthcareBusiness & Professional Services +2 moreMedia & EntertainmentTransportation & Logistics | not yet mapped | 73 | |
| Frag | ransomware | Aerospace & DefenseBusiness & Professional ServicesConstruction & Engineering +2 moreFinancial ServicesLegal | not yet mapped | 29 | |
| Bert | ransomware | TechnologyConstruction & EngineeringHealthcare +2 moreManufacturingMedia & Entertainment | not yet mapped | 10 | |
| Devman | ransomware | Construction & EngineeringGovernmentHealthcare +2 moreMedia & EntertainmentTechnology | not yet mapped | 49 | |
| Arkana Security | ransomware | Energy & UtilitiesFinancial ServicesGovernment +2 moreMedia & EntertainmentTechnology | not yet mapped | 7 | |
| Black Suit | ransomware | ManufacturingConstruction & EngineeringEducation +2 moreHealthcareGovernment | not yet mapped | 191 | |
| Hunters | ransomware | ManufacturingConstruction & EngineeringHealthcare +2 moreEnergy & UtilitiesGovernment | not yet mapped | 306 | |
| Monti | ransomware | HealthcareBusiness & Professional ServicesEducation +2 moreManufacturingConstruction & Engineering | not yet mapped | 89 | |
| Orca | ransomware | ManufacturingAgricultureTechnology +1 moreTransportation & Logistics | not yet mapped | 6 | |
| Hellcat | ransomware | TechnologyGovernmentAutomotive +2 moreFinancial ServicesInsurance | not yet mapped | 27 | |
| Skira Team | ransomware | Business & Professional ServicesGovernmentLegal +2 moreManufacturingReal Estate | not yet mapped | 7 | |
| Dunghill | ransomware | TechnologyConstruction & EngineeringMedia & Entertainment +2 moreAutomotiveBusiness & Professional Services | not yet mapped | 15 | |
| Ralord | ransomware | AgricultureConstruction & EngineeringEducation +2 moreNonprofitRetail | not yet mapped | 21 | |
| Azzasec | ransomware | EducationGovernmentMedia & Entertainment | not yet mapped | 3 | |
| Wikileaksv2 | ransomware | Construction & EngineeringHealthcareManufacturing +2 moreGovernmentLegal | not yet mapped | 45 | |
| Babuk-bjorka | ransomware | GovernmentHealthcareRetail +2 moreTelecommunicationsEnergy & Utilities | not yet mapped | 211 | |
| RansomHub | ransomware | HealthcareConstruction & EngineeringManufacturing +2 moreGovernmentEducation | not yet mapped | 868 | |
| Vanhelsing | ransomware | Media & EntertainmentGovernmentHealthcare +2 moreLegalManufacturing | not yet mapped | 8 | |
| BianLian | ransomware | HealthcareManufacturingBusiness & Professional Services +2 moreLegalConstruction & Engineering | not yet mapped | 521 | |
| Crazyhunter Team | ransomware | HealthcareManufacturingEducation +2 moreEnergy & UtilitiesRetail | not yet mapped | 8 | |
| Zerolockersec | ransomware | Financial ServicesGovernment | not yet mapped | 2 | |
| Fog | ransomware | EducationManufacturingConstruction & Engineering +2 moreHealthcareTransportation & Logistics | not yet mapped | 134 | |
| Funksec | ransomware | GovernmentTechnologyEducation +2 moreMedia & EntertainmentRetail | not yet mapped | 203 | |
| Cactus | ransomware | ManufacturingRetailConstruction & Engineering +2 moreBusiness & Professional ServicesTransportation & Logistics | not yet mapped | 371 | |
| Belsen Group | ransomware | TechnologyConstruction & EngineeringManufacturing +2 moreFinancial ServicesRetail | not yet mapped | 11 | |
| Ox Thief | ransomware | Education | not yet mapped | 1 | |
| 8Base | ransomware | ManufacturingBusiness & Professional ServicesConstruction & Engineering +2 moreRetailHealthcare | not yet mapped | 457 | |
| Gd Lockersec | ransomware | EducationTechnologyGovernment | not yet mapped | 8 | |
| Black Basta | ransomware | ManufacturingConstruction & EngineeringRetail +2 moreFinancial ServicesLegal | not yet mapped | 490 | |
| Darkvault | ransomware | TechnologyBusiness & Professional ServicesRetail +2 moreConsumer ServicesFinancial Services | not yet mapped | 55 | |
| Ra Group | ransomware | Pharmaceuticals & Life SciencesBusiness & Professional ServicesHealthcare +2 moreInsuranceManufacturing | not yet mapped | 161 | |
| Bluebox | ransomware | Construction & EngineeringManufacturingTransportation & Logistics | not yet mapped | 5 | |
| Argonauts Group | ransomware | ManufacturingAerospace & DefenseHealthcare +2 morePharmaceuticals & Life SciencesTechnology | not yet mapped | 18 | |
| Dispossessor | ransomware | ManufacturingHealthcareFinancial Services +2 moreConstruction & EngineeringEducation | not yet mapped | 338 | |
| Chort | ransomware | EducationGovernmentManufacturing +1 moreNonprofit | not yet mapped | 7 | |
| Meow | ransomware | Business & Professional ServicesHealthcareConstruction & Engineering +2 moreGovernmentLegal | not yet mapped | 145 | |
| Helldown | ransomware | HealthcareNonprofitTransportation & Logistics +2 moreConstruction & EngineeringEnergy & Utilities | not yet mapped | 32 | |
| Playboy | ransomware | Business & Professional ServicesMedia & Entertainment | not yet mapped | 4 | |
| Donutleaks | ransomware | HealthcareManufacturingTechnology +2 moreConstruction & EngineeringAerospace & Defense | not yet mapped | 44 | |
| Pyrx | ransomware | GovernmentEducationFinancial Services | not yet mapped | 11 | |
| Mad Liberator | ransomware | GovernmentLegalManufacturing +2 moreTransportation & LogisticsConstruction & Engineering | not yet mapped | 14 | |
| ValenciaLeaksaka valencialeaks | ransomware | GovernmentHealthcarePharmaceuticals & Life Sciences +1 moreRetail | not yet mapped | 6 | |
| Bjorka | ransomware | GovernmentTelecommunicationsEnergy & Utilities | not yet mapped | 11 | |
| Dan0n | ransomware | Business & Professional ServicesConstruction & EngineeringHealthcare +2 moreLegalInsurance | not yet mapped | 31 | |
| Mallox | ransomware | ManufacturingRetailTechnology +2 moreBusiness & Professional ServicesEnergy & Utilities | not yet mapped | 51 | |
| Ransomcortex | ransomware | Healthcare | not yet mapped | 4 | |
| Vanir Group | ransomware | ManufacturingTechnologyTransportation & Logistics | not yet mapped | 3 | |
| Qiulong | ransomware | HealthcareAutomotiveConstruction & Engineering | not yet mapped | 8 | |
| Red Ransomware | ransomware | ManufacturingTechnologyEducation +1 moreHospitality | not yet mapped | 16 | |
| Sensayq | ransomware | Financial ServicesManufacturing | not yet mapped | 2 | |
| Snatch | ransomware | ManufacturingHealthcareEducation +2 moreFinancial ServicesGovernment | not yet mapped | 143 | |
| Zero Tolerance Gang (ztg) | ransomware | Financial Services | not yet mapped | 1 | |
| Hellogookie | ransomware | Media & EntertainmentTechnology | not yet mapped | 3 | |
| Malek Team | ransomware | HealthcareConstruction & EngineeringEducation +2 moreGovernmentHospitality | not yet mapped | 9 | |
| Trigona | ransomware | ManufacturingConstruction & EngineeringBusiness & Professional Services +2 moreHealthcareTechnology | not yet mapped | 52 | |
| Werewolves | ransomware | Business & Professional ServicesFinancial ServicesHospitality +2 moreRetailTechnology | not yet mapped | 26 | |
| Donex | ransomware | Transportation & LogisticsBusiness & Professional ServicesHospitality +1 moreTechnology | not yet mapped | 5 | |
| ALPHV | ransomware | ManufacturingLegalHealthcare +2 moreBusiness & Professional ServicesTechnology | not yet mapped | 769 | |
| Mogilevich | ransomware | TechnologyAutomotiveGovernment +2 moreMedia & EntertainmentRetail | not yet mapped | 6 | |
| Trisec | ransomware | Retail | not yet mapped | 3 | |
| Knight | ransomware | Business & Professional ServicesHealthcareManufacturing +2 moreGovernmentTransportation & Logistics | not yet mapped | 54 | |
| Cuba | ransomware | ManufacturingEducationFinancial Services +2 moreHealthcareTransportation & Logistics | not yet mapped | 105 | |
| 0mega | ransomware | HealthcareManufacturingRetail +2 moreTechnologyTransportation & Logistics | not yet mapped | 7 | |
| Noname | ransomware | Business & Professional ServicesConstruction & EngineeringManufacturing +2 moreNonprofitReal Estate | not yet mapped | 7 | |
| Slug | ransomware | Transportation & Logistics | not yet mapped | 1 | |
| Insane Ransomware | ransomware | Pharmaceuticals & Life Sciences | not yet mapped | 2 | |
| Raznatovic | ransomware | AutomotiveEducationEnergy & Utilities +1 moreManufacturing | not yet mapped | 6 | |
| Lorenz | ransomware | Construction & EngineeringHealthcareFinancial Services +2 moreManufacturingAutomotive | not yet mapped | 98 | |
| Siegedsec | ransomware | GovernmentHealthcareTelecommunications +2 moreEducationEnergy & Utilities | not yet mapped | 19 | |
| Noescape | ransomware | ManufacturingBusiness & Professional ServicesHealthcare +2 moreConstruction & EngineeringEducation | not yet mapped | 157 | |
| Ransomed | ransomware | Financial ServicesHealthcareInsurance +2 moreMedia & EntertainmentRetail | not yet mapped | 78 | |
| Clop Torrents | ransomware | Business & Professional ServicesFinancial ServicesTechnology +2 moreManufacturingHealthcare | not yet mapped | 238 | |
| Arvinclub | ransomware | EducationFinancial ServicesGovernment +2 moreAgriculturePharmaceuticals & Life Sciences | not yet mapped | 39 | |
| Ragnarlocker | ransomware | Transportation & LogisticsEnergy & UtilitiesManufacturing +2 moreFinancial ServicesLegal | not yet mapped | 114 | |
| Losttrust | ransomware | Construction & EngineeringManufacturingEducation +2 moreLegalBusiness & Professional Services | not yet mapped | 53 | |
| Karakurt | ransomware | HealthcareConstruction & EngineeringManufacturing +2 moreEducationRetail | not yet mapped | 108 | |
| Cryptbb | ransomware | Construction & EngineeringAutomotiveBusiness & Professional Services +2 moreEducationLegal | not yet mapped | 8 | |
| Rancoz | ransomware | ManufacturingConstruction & EngineeringLegal +1 moreTechnology | not yet mapped | 6 | |
| Nokoyawa | ransomware | HealthcareEducationBusiness & Professional Services +2 moreConstruction & EngineeringNonprofit | not yet mapped | 35 | |
| Cyclops | ransomware | GovernmentHealthcareTechnology +2 moreTelecommunicationsTransportation & Logistics | not yet mapped | 7 | |
| Royal | ransomware | ManufacturingEducationConstruction & Engineering +2 moreBusiness & Professional ServicesHealthcare | not yet mapped | 200 | |
| Vicesociety | ransomware | EducationHealthcareGovernment +2 moreManufacturingRetail | not yet mapped | 171 | |
| La Piovra | ransomware | Not reported | not yet mapped | 2 | |
| Darkrace | ransomware | AutomotiveTechnologyConsumer Services +2 moreEnergy & UtilitiesHospitality | not yet mapped | 10 | |
| Malas | ransomware | AgricultureFinancial Services | not yet mapped | 4 | |
| Avoslocker | ransomware | EducationConstruction & EngineeringManufacturing +2 moreHealthcareBusiness & Professional Services | not yet mapped | 141 | |
| Cryptnet | ransomware | AutomotiveBusiness & Professional Services | not yet mapped | 2 | |
| Crosslock | ransomware | Agriculture | not yet mapped | 1 | |
| Dark Power | ransomware | EducationGovernmentHealthcare +1 morePharmaceuticals & Life Sciences | not yet mapped | 10 | |
| V Is Vendetta | ransomware | AgricultureReal EstateRetail | not yet mapped | 3 | |
| Hive | ransomware | ManufacturingHealthcareConstruction & Engineering +2 moreTechnologyEducation | not yet mapped | 201 | |
| Izis | ransomware | Business & Professional ServicesConsumer ServicesFinancial Services +1 moreManufacturing | not yet mapped | 4 | |
| Quantum | ransomware | ManufacturingGovernmentConstruction & Engineering +2 moreEducationEnergy & Utilities | not yet mapped | 74 | |
| Revil | ransomware | EducationAutomotiveBusiness & Professional Services +2 moreConstruction & EngineeringHealthcare | not yet mapped | 41 | |
| Lv | ransomware | Construction & EngineeringHealthcareConsumer Services +2 moreEnergy & UtilitiesGovernment | not yet mapped | 52 | |
| Relic | ransomware | HealthcareAutomotiveBusiness & Professional Services +1 moreRetail | not yet mapped | 5 | |
| Yanluowang | ransomware | Telecommunications | not yet mapped | 7 | |
| Vsop | ransomware | GovernmentHealthcareAgriculture +2 moreBusiness & Professional ServicesConstruction & Engineering | not yet mapped | 13 | |
| Monte | ransomware | LegalFinancial ServicesTechnology | not yet mapped | 4 | |
| Sparta | ransomware | Construction & EngineeringInsuranceManufacturing +2 moreRetailAutomotive | not yet mapped | 13 | |
| Redalert | ransomware | Legal | not yet mapped | 6 | |
| Cheers | ransomware | HospitalityInsuranceTransportation & Logistics | not yet mapped | 7 | |
| Icefire | ransomware | Not reported | not yet mapped | 55 | |
| Blacktor | ransomware | Financial ServicesEducation | not yet mapped | 9 | |
| Freecivilian | ransomware | Government | not yet mapped | 14 | |
| Suncrypt | ransomware | HealthcareEducationGovernment +1 moreReal Estate | not yet mapped | 30 | |
| Conti | ransomware | Construction & EngineeringBusiness & Professional ServicesFinancial Services +2 moreManufacturingGovernment | not yet mapped | 291 | |
| Midas | ransomware | ManufacturingConstruction & EngineeringTransportation & Logistics | not yet mapped | 44 | |
| Pandora | ransomware | Not reported | not yet mapped | 6 | |
| Cryp70n1c0d3 | ransomware | Education | not yet mapped | 12 | |
| Sabbath | ransomware | Education | not yet mapped | 23 | |
| Cooming | ransomware | EducationFinancial ServicesGovernment +2 moreInsuranceMedia & Entertainment | not yet mapped | 38 | |
| Babuk-locker | ransomware | Consumer ServicesTransportation & Logistics | not yet mapped | 6 | |
| Nightsky | ransomware | Not reported | not yet mapped | 2 | |
| Rook | ransomware | Not reported | not yet mapped | 11 | |
| Payloadbin | ransomware | AutomotiveGovernmentLegal | not yet mapped | 30 | |
| Pay2key | ransomware | LegalAerospace & DefenseTechnology | not yet mapped | 7 | |
| Pysa | ransomware | EducationHealthcareGovernment +2 moreConstruction & EngineeringTransportation & Logistics | not yet mapped | 308 | |
| Lockdata | ransomware | Not reported | not yet mapped | 6 | |
| Robinhood | ransomware | Insurance | not yet mapped | 3 | |
| Blackshadow | ransomware | Insurance | G1030 · 22 techniques | 3 | |
| Bonacigroup | ransomware | Financial ServicesLegal | not yet mapped | 3 | |
| Blackmatter | ransomware | Financial ServicesTransportation & LogisticsAutomotive +2 moreConstruction & EngineeringTelecommunications | not yet mapped | 31 | |
| Groove | ransomware | Not reported | not yet mapped | 13 | |
| Xinglocker | ransomware | HealthcareConstruction & EngineeringFinancial Services +2 moreManufacturingTransportation & Logistics | not yet mapped | 21 | |
| Spook | ransomware | Construction & EngineeringTransportation & LogisticsAutomotive +2 moreBusiness & Professional ServicesLegal | not yet mapped | 35 | |
| Karma | ransomware | Not reported | not yet mapped | 7 | |
| Mountlocker | ransomware | Construction & Engineering | not yet mapped | 18 | |
| Nefilim | ransomware | Media & EntertainmentHealthcare | not yet mapped | 10 | |
| Ragnarok | ransomware | Not reported | not yet mapped | 1 | |
| Avaddon | ransomware | GovernmentTransportation & LogisticsHealthcare +2 moreLegalManufacturing | not yet mapped | 142 | |
| The Crew | ransomware | Financial ServicesEducationGovernment +2 moreHospitalityTransportation & Logistics | not yet mapped | 6 | Not reported |
No actors match your current search and filters. Reset search and filters to show all actors.
Ransomware claim data is unverified: RansomLook (CC BY 4.0) and ransomware.live (Terms of use: credit and link required). ATT&CK group data comes from MITRE ATT&CK. A group is linked to MITRE ATT&CK only when MITRE's own name, alias, or description names it.
News reporting only
These profiles come only from stories on this site. Their counts describe this site's coverage, not actor activity or attribution.
- APT29Tagged in 21 of the third-party stories this site aggregates
- TurlaTagged in 4 of the third-party stories this site aggregates
- Volt TyphoonTagged in 11 of the third-party stories this site aggregates
- Lazarus GroupTagged in 21 of the third-party stories this site aggregates
- Salt TyphoonTagged in 9 of the third-party stories this site aggregates
- APT41Tagged in 2 of the third-party stories this site aggregates
- APT28Tagged in 9 of the third-party stories this site aggregates
- SandwormTagged in 17 of the third-party stories this site aggregates
- Scattered SpiderTagged in 28 of the third-party stories this site aggregates
- KimsukyTagged in 4 of the third-party stories this site aggregates
- Mustang PandaTagged in 3 of the third-party stories this site aggregates
- Hunters InternationalTagged in 1 of the third-party stories this site aggregates
- FIN7Tagged in 1 of the third-party stories this site aggregates
How this is computed
Leak-site profiles use unverified victim claims and verified MITRE ATT&CK mappings. News-reporting profiles count stories that name the group and make no activity claim.
Method reviewed on .