Ransomware Tracker

Ransomware Analysis powered by WatchGuard Threat Lab

Coverage

Total Ransomware

334

Known Victims

4,203

Total Decryptors

36

Active Groups

116

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

	Name	Ransomware Type	First Seen Sort ascending	Last Seen
	Mimic	Builder, Crypto-Ransomware, HumOR	July 2022
	Mimic (Builder)	Builder, Crypto-Ransomware	July 2022
	Bl00dy	Crypto-Ransomware, Data Broker	July 2022
	Lilith	Crypto-Ransomware	July 2022	July 2022
	RedAlert	Crypto-Ransomware, HumOR	July 2022	December 2022
	BianLian	Crypto-Ransomware, Data Broker	July 2022	March 2025
	BlueSky	Crypto-Ransomware	June 2022	January 2023
Active	LockBit 3.0	Builder, Crypto-Ransomware, Data Broker, HumOR, RaaS	June 2022
Active	DAIXIN	Crypto-Ransomware, Data Broker	June 2022
	Monti	Crypto-Ransomware	June 2022
Active	Play	Crypto-Ransomware	June 2022
	Free Followers	Locker, Scareware	June 2022	June 2022
	Crimson Walrus	Simulator/Emulator	June 2022	June 2022
	XRansom	Builder, FOSS, Locker, Scareware	June 2022
	Dark Angels	Crypto-Ransomware, Data Broker, HumOR	May 2022

« First
‹‹
…
12
13
14
15
16
17
18
19
20
…
››
Last »

Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More