Ransomware Tracker

Ransomware Analysis powered by WatchGuard Threat Lab

Go to 

Coverage

Total Ransomware

383

Known Victims

4,791

Total Decryptors

36

Active Groups

138

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

Name Ransomware Type First Seen Last Seen
 Active NetRunner Crypto-Ransomware, Data Broker
The Green Blood Group Crypto-Ransomware, Data Broker
0APT Crypto-Ransomware, Data Broker, RaaS
 Active BravoX Crypto-Ransomware, Data Broker, RaaS
 Active Global Secret Group Data Broker
Sicari Builder, Crypto-Ransomware, Data Broker, RaaS
CRPxO Builder, Crypto-Ransomware, Data Broker, RaaS
 Active MS13-089 Data Broker
 Active Benzona Crypto-Ransomware, Data Broker
Osiris Data Broker
 Active Reynolds Crypto-Ransomware, Data Broker
 Active TridentLocker Crypto-Ransomware, Data Broker
 Active Orion Leaks Crypto-Ransomware, Data Broker, RaaS
MintEye Data Broker
 Active ShadowByt3$ Crypto-Ransomware, Data Broker, RaaS
Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More

Related Blogs

Read more