Ransomware Tracker

Ransomware Analysis powered by WatchGuard Threat Lab

Go to 

Coverage

Total Ransomware

328

Known Victims

4,102

Total Decryptors

36

Active Groups

109

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

Name Ransomware Type First Seen Last Seen
 Active 0APT Crypto-Ransomware, Data Broker, RaaS
 Active BravoX Crypto-Ransomware, Data Broker, RaaS
Sicari Builder, Crypto-Ransomware, Data Broker, RaaS
 Active MS13-089 Data Broker
 Active Benzona Crypto-Ransomware, Data Broker
 Active Osiris Data Broker
 Active Reynolds Crypto-Ransomware, Data Broker
 Active TridentLocker Crypto-Ransomware, Data Broker
 Active Orion Leaks Crypto-Ransomware, Data Broker, RaaS
MintEye Data Broker
 Active ShadowByt3$ Crypto-Ransomware, Data Broker, RaaS
 Active TENGU Crypto-Ransomware, Data Broker, RaaS
 Active BrotherHood Data Broker
 Active Insomnia Data Broker
 Active Nasir Data Broker
Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More

Related Blogs

Read more