Ransomware Tracker

Ransomware Analysis powered by WatchGuard Threat Lab

Go to 

Coverage

Total Ransomware

338

Known Victims

4,368

Total Decryptors

36

Active Groups

119

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

Name Ransomware Type First Seen Last Seen
D4RK4RMY Crypto-Ransomware, Data Broker, RaaS
 Active Devman 2.0 Crypto-Ransomware, Data Broker, RaaS
BlackField Crypto-Ransomware, Data Broker
BlackByte-Crux Crypto-Ransomware, Data Broker, HumOR
 Active Sinobi Data Broker
 Active Payouts King Data Broker
 Active Kazu Data Broker
 Active PEAR Data Broker
KaWa4096 Crypto-Ransomware, Data Broker
Cephalus Crypto-Ransomware, Data Broker
 Active Warlock Crypto-Ransomware, Data Broker
 Active W.A. Crypto-Ransomware, Data Broker
Global Crypto-Ransomware, Data Broker, RaaS
 Active Dire Wolf Crypto-Ransomware, Data Broker
 Active DATACARRY Crypto-Ransomware, Data Broker
Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More

Related Blogs

Read more