Skip to main content
Close search
  • Log In
  • Contact Us
  • Global Sites

    Français
    Deutsch
    Italiano
    Português
    Español
    日本語
Home
  • Back

    Platform

    • Platform Overview

    • Unified Security Platform
    • Unified Security Agent
    • Centralized Management

    • AI-Powered XDR

    • RMM & PSA Integrations
    • Compliance Reports

    • Managed Services for MSPs

    • Managed Detection & Response

    • Security Operations Center (SOC)
    • Network Security

    • Firewalls

    • Firewall Security Services

    • Network Detection & Response (NDR)

    • Secure Wi-Fi
    • Endpoint Security

    • Comprehensive EDR

    • Foundational EDR

    • Endpoint Protection & Next-Gen AV

    • Endpoint Security Modules

    • Identity Security

    • Multi-Factor Authentication (MFA)

    • Single Sign-On (SSO)
    • Hardware Token

    • Zero Trust
    • Secure Access Service Edge (SASE)
    • View All Products

  • Back

    Why WatchGuard

    • Why WatchGuard
    • WatchGuard vs The Competition
    • Compare SonicWall
    • Compare Microsoft
    • Compare Fortinet
    • Compare Sophos
    • Compare CrowdStrike
    • Case Studies
    • Case Studies
    • Partner Success Stories
    • Solutions

    • Industries

    • Regulations

    • Organizations
    • Security Models
    • spacer
    • Industry Recognition

    • Awards & Recognition

    • Customer Reviews

    • Compliance & Regulations

  • Back

    Learn

    • Cybersecurity 101
    • AI & Automation
    • Cyber Attacks & Threats
    • Endpoint Security
    • VPN
    • Managed Detection & Response

    • Blogs
    • Corporate News Blog
    • Product & Support Blog
    • Secplicity
    • Threat Lab
    • Internet Security Report
    • Threat Landscape
    • Ransomware Tracker
    • The 443 Podcast
    • Cybersecurity Trends
    • SD-WAN
    • XDR Security
    • Zero Trust Security
    • MSP vs MSSP
    • Webinars & Events
    • Register for a Webinar
    • Upcoming Live Demos
    • On Demand Webinars
    • View All Resources
  • Back

    Company

    • News Room

    • Press Releases

    • Press Coverage

    • Corporate News Blog

    • Webinars & Events
    • Awards & Recognition

    • Media Contacts

    • About WatchGuard

    • Leadership
    • 30 Years of Innovation

    • Real Security for the Real World
    • Social Responsibility

    • Careers

    • WatchGuard Brand Partners
    • Seattle Kraken
    • Girona FC
    • Trust Center
    • PSIRT
    • Product Certifications
  • Back

    Partners

    • Partners
    • Become a Partner

    • Channel Partner Program

    • Benefits for the MSP

    • Getting Started as a Partner

    • Join the WatchGuardONE Program

    • Partner Resources

    • WatchGuard Cloud for Partners

    • Unified Security Platform for Partners

    • Specializations & Certifications

    • Partner Tools

    • Partner Success Stories

    • Find A Partner

    • Find a Reseller

    • Find a Distributor

  • Back

    Support

    • Support
    • Technical Resources

    • Technical Search

    • User Forums

    • Technical Documentation

    • Product & Support Blog

    • Software Downloads

    • Security Portal

    • Training

    • Certification

    • WatchGuard Learning Center
    • Locate a Training Partner

    • Training Schedule

    • Video Tutorials

    • Support Services

    • Hire an Expert

    • Support Levels

    • Additional Support Services

    • spacer
    • Security Advisory List
    • Status Dashboard
  • Close search
  • Try Now
Open mobile navigation menu

Ransomware TrackerBeta

Ransomware Analysis powered by WatchGuard Threat Lab

Go to 

Cybersecurity

  • Cybersecurity Hub
  • Internet Security Report
  • Threat Landscape
  • Ransomware Tracker
  • Secplicity Blog
  • The 443 Podcast

Coverage

Total Ransomware

321

Known Victims

4,068

Total Decryptors

36

Active Groups

102

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

Name Sort descending Ransomware Type First Seen Last Seen
Cephalus Crypto-Ransomware, Data Broker June 2025
 Active CHAOS Data Broker March 2025
Chaos v1.0 Builder, Imitation, Wiper June 2021 June 2021
Chaos v2.0 Builder, Wiper June 2021 July 2021
Chaos v3.0 Builder, Crypto-Ransomware, Wiper July 2021 August 2021
Chaos v4.0 Builder, Crypto-Ransomware, Wiper August 2021 April 2022
Chaos v5.0 Builder, Crypto-Ransomware April 2022 May 2022
ChastityLock Locker October 2020 October 2020
CheersCrypt Crypto-Ransomware, Data Broker February 2022 September 2022
Cheng Xilun Crypto-Ransomware April 2020 April 2020
Chort Data Broker October 2024
Cicada3301 Crypto-Ransomware, Data Broker, RaaS June 2024
 Active CiphBit Crypto-Ransomware, Data Broker April 2023
 Active CipherForce Crypto-Ransomware, Data Broker February 2026
 Active Cl0p Crypto-Ransomware, Data Broker February 2019

Pagination

  • « First
  • ‹‹
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • …
  • ››
  • Last »
Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More

Related Blogs

Ransomware Image
Article

Key Lessons from the Major Ransomware Attacks in Recent Months

Article

Key Lessons from the Major Ransomware Attacks in Recent Months

Learn from the ransomware attacks in recent months and find out how to protect your company against advanced threats.

Read Article
Illustration of a secure digital shield protecting a city network, representing Zero Trust cybersecurity and data protection.
Article

Zero Trust for Mid-Market: Why Modern IT Security Assumes Attacks Will Succeed

Article

Zero Trust for Mid-Market: Why Modern IT Security Assumes Attacks Will Succeed

Why mid-market security must assume breaches will happen. Learn how Zero Trust, EDR, MFA, and 24/7 monitoring reduce real-world risk.

Read Article
blog_image-Black-Friday.jpg
Article

Black Friday: How to Protect Your Retail Clients from Ransomware

Article

Black Friday: How to Protect Your Retail Clients from Ransomware

Black Friday heightens cyber risks for retailers, so MSPs must anticipate threats, prioritize critical issues, and respond fast to stay resilient.

Read Article
Read more
  • About Us
  • Contact Us
  • Real Security
  • Careers
  • Product List & SKUs
  • Media & Brand Kit
  • Support
  • Trust Center
  • PSIRT
  • Cookie Policy
  • Privacy Policy
  • Manage Email Preferences
LinkedIn X Facebook Instagram YouTube

Email Us

Global Sites

Français
Deutsch
Italiano
Português
Español
日本語

Copyright © 1996-2026 WatchGuard Technologies, Inc. All Rights Reserved.
Terms of Use | California Collection Notice | Do Not Sell or Share My Personal Information