Ransomware Groups
Most active ransomware operators ranked by victim count
Active Groups
204
+17.9%tracked ransomware operators
Total Victims
7,195
+9.9%across all groups
Top Operator
qilin
18.7% of victims
Threat Actor Heat-Map
Loading 19 / 20 groups…
Ransomware Group Profiles
#1
qilin
Active
18.7% of attacks
1,346
victims
#2
akira
Active
9.1% of attacks
656
victims
#3
the gentlemen
Active
7.1% of attacks
514
victims
#4
inc ransom
Active
6.6% of attacks
473
victims
#5
thegentlemen
Active
6.5% of attacks
468
victims
#6
incransom
Active
6.4% of attacks
459
victims
#7
dragonforce
Active
5.4% of attacks
392
victims
#8
play
Active
4.7% of attacks
335
victims
#9
lockbit5
Active
4% of attacks
290
victims
#10
sinobi
Active
3.8% of attacks
273
victims
#11
clop
Active
3.5% of attacks
249
victims
#12
nightspire
Active
3.3% of attacks
240
victims
#13
killsec3
Active
3.2% of attacks
232
victims
#14
safepay
Active
3.2% of attacks
232
victims
#15
devman2
Active
2.8% of attacks
204
victims
#16
everest
Active
2.7% of attacks
196
victims
#17
coinbase cartel
Active
2.3% of attacks
169
victims
#18
coinbasecartel
Active
2.3% of attacks
167
victims
#19
devman
ACTIVE
2.1% of attacks
150
victims
#20
lynx
Active
2.1% of attacks
150
victims
Page 1 of 11(204 groups)