Ransomware TrackerBeta
Ransomware Analysis powered by WatchGuard Threat Lab
Coverage
Total Ransomware
293
Known Victims
3,848
Total Decryptors
36
Active Groups
113
Ransomware Tracker Map
The map
Hover over a country to see the number of tracked victims.
Ransomware Database
| Name | Ransomware Type | First Seen Sort ascending | Last Seen | |
|---|---|---|---|---|
| Active | TENGU | Crypto-Ransomware, Data Broker, RaaS | ||
| Active | BrotherHood | Data Broker | ||
| Active | Nasir | Data Broker | ||
| Active | Kryptos | Crypto-Ransomware, Data Broker, RaaS | ||
| Active | White Lock | Crypto-Ransomware | ||
| Active | Kyber | Crypto-Ransomware, Data Broker | ||
| Active | FulcrumSec | Data Broker | ||
| Active | Genesis | Data Broker | ||
| Active | Arachna Leak | Data Broker | ||
| Active | Radiant Group | Crypto-Ransomware, Data Broker | ||
| Active | MakeIsraelGreatAgain | Data Broker | ||
| Active | Black Shrantac | Data Broker | ||
| Active | Coinbase Cartel | Data Broker, RaaS | ||
| Active | RADAR | Data Broker | ||
| Active | Yurei | Crypto-Ransomware, Data Broker |
Threat Landscape
WatchGuard Fireboxes each blocked an average of 4854 malware threats in Q2 2025
See More
Related Blogs
Article
No More Ransom: Why the UK’s Crackdown Signals the End of Paying Hackers
Article
No More Ransom: Why the UK’s Crackdown Signals the End of Paying Hackers
Ransomware’s reign is ending: after a summer of cyber chaos, the UK has drawn a red line—no more payouts, no more sweeping attacks under the rug.
Article
Ransomware Techniques Are Changing. Are MSPs Ready for This Shift?
Article
Ransomware Techniques Are Changing. Are MSPs Ready for This Shift?
Ransomware continues to evolve. Are MSPs ready to keep customers safe?
Article
Less ransomware, same risk. How can it be prevented?
Article
Less ransomware, same risk. How can it be prevented?
Ransomware is decreasing, but its impact isn't. Find out how to protect yourself with a zero trust approach to cybersecurity