Ransomware TrackerBeta
Ransomware Analysis powered by WatchGuard Threat Lab
Coverage
Total Ransomware
293
Known Victims
3,848
Total Decryptors
36
Active Groups
113
Ransomware Tracker Map
The map
Hover over a country to see the number of tracked victims.
Ransomware Database
| Name Sort descending | Ransomware Type | First Seen | Last Seen | |
|---|---|---|---|---|
| Active | Sarcoma | Crypto-Ransomware, Data Broker | ||
| ScareCrow (2022) | Crypto-Ransomware | |||
| Active | Scattered LAPSUS$ Hunters | Crypto-Ransomware, Data Broker | ||
| Active | SECP0 | Data Broker | ||
| SenSayQ | Crypto-Ransomware, Data Broker | |||
| Shadow | ||||
| SiegedSec | Data Broker | |||
| Active | Silent | Crypto-Ransomware, Data Broker, RaaS | ||
| Active | Sinobi | Data Broker | ||
| SKIRA TEAM | Data Broker | |||
| Slug | Crypto-Ransomware, Data Broker | |||
| Snatch | Crypto-Ransomware, Data Broker | |||
| Somnia | Crypto-Ransomware, Wiper | |||
| Sonshi | Wiper | |||
| Active | Space Bears | Data Broker |
Threat Landscape
WatchGuard Fireboxes each blocked an average of 4854 malware threats in Q2 2025
See More
Related Blogs
Article
No More Ransom: Why the UK’s Crackdown Signals the End of Paying Hackers
Article
No More Ransom: Why the UK’s Crackdown Signals the End of Paying Hackers
Ransomware’s reign is ending: after a summer of cyber chaos, the UK has drawn a red line—no more payouts, no more sweeping attacks under the rug.
Article
Ransomware Techniques Are Changing. Are MSPs Ready for This Shift?
Article
Ransomware Techniques Are Changing. Are MSPs Ready for This Shift?
Ransomware continues to evolve. Are MSPs ready to keep customers safe?
Article
Less ransomware, same risk. How can it be prevented?
Article
Less ransomware, same risk. How can it be prevented?
Ransomware is decreasing, but its impact isn't. Find out how to protect yourself with a zero trust approach to cybersecurity