Ransomware TrackerBeta
Ransomware Analysis powered by WatchGuard Threat Lab
Coverage
Total Ransomware
294
Known Victims
3,855
Total Decryptors
36
Active Groups
114
Ransomware Tracker Map
The map
Hover over a country to see the number of tracked victims.
Ransomware Database
| Name Sort descending | Ransomware Type | First Seen | Last Seen | |
|---|---|---|---|---|
| Unsafe | Data Broker | |||
| V is Vendetta | ||||
| Valencia | Data Broker | |||
| Active | VanHelsing | Crypto-Ransomware, Data Broker, HumOR, RaaS | ||
| Vanir Group | Crypto-Ransomware, Data Broker | |||
| Venus | Crypto-Ransomware, RaaS | |||
| Vice Society | Data Broker | |||
| VirLock | Crypto-Ransomware, Imitation, Locker, Polymorphic, Scareware | |||
| Active | W.A. | Crypto-Ransomware, Data Broker | ||
| WAGNER | Crypto-Ransomware, Wiper | |||
| Active | Warlock | Crypto-Ransomware, Data Broker | ||
| Werewolves | Data Broker | |||
| Active | Weyhro | Data Broker | ||
| WhisperGate | Wiper | |||
| Active | White Lock | Crypto-Ransomware |
Threat Landscape
WatchGuard Fireboxes each blocked an average of 4854 malware threats in Q2 2025
See More
Related Blogs
Article
Black Friday: How to Protect Your Retail Clients from Ransomware
Article
Black Friday: How to Protect Your Retail Clients from Ransomware
Black Friday heightens cyber risks for retailers, so MSPs must anticipate threats, prioritize critical issues, and respond fast to stay resilient.
Article
How Computer Security Has Evolved and What You Can Do Now
Article
How Computer Security Has Evolved and What You Can Do Now
Learn how computer security has evolved and what steps you can take to protect your identity, devices, and data.
Article
No More Ransom: Why the UK’s Crackdown Signals the End of Paying Hackers
Article
No More Ransom: Why the UK’s Crackdown Signals the End of Paying Hackers
Ransomware’s reign is ending: after a summer of cyber chaos, the UK has drawn a red line—no more payouts, no more sweeping attacks under the rug.