Ransomware Tracker

Ransomware Analysis powered by WatchGuard Threat Lab

Go to 

Coverage

Total Ransomware

342

Known Victims

4,388

Total Decryptors

36

Active Groups

123

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

Name Ransomware Type First Seen Last Seen
 Active Triple X Data Broker
 Active Icarus Data Broker
Sorry Worm Crypto-Ransomware
 Active MNT6 Data Broker
 Active M3RX Crypto-Ransomware, Data Broker
 Active CMD Organization Data Broker
 Active Aur0ra Crypto-Ransomware, Data Broker
 Active TITAN Crypto-Ransomware, Data Broker, RaaS
 Active TiMc Data Broker
 Active Threat Market Data Broker
 Active KryBit Crypto-Ransomware, Data Broker, RaaS
 Active cry0 Data Broker
 Active Killada Crypto-Ransomware
 Active Leak Bazaar Data Broker
 Active Lamashtu Data Broker
Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More

Related Blogs

Read more