Ransomware Tracker

Ransomware Analysis powered by WatchGuard Threat Lab

Go to 

Coverage

Total Ransomware

338

Known Victims

4,368

Total Decryptors

36

Active Groups

119

Ransomware Tracker Map

The map

Hover over a country to see the number of tracked victims.

Ransomware Database

Name Ransomware Type First Seen Last Seen
 Active LockBit 4.0 Builder, Crypto-Ransomware, RaaS
 Active Morpheus Crypto-Ransomware, Data Broker
 Active Weyhro Data Broker
 Active LEAKEDDATA Data Broker
FunkSec Builder, Crypto-Ransomware, Data Broker, RaaS
Bluebox 1.0 Data Broker
 Active Anubis Crypto-Ransomware, Data Broker
 Active LeakNet Data Broker
 Active SafePay Crypto-Ransomware, Data Broker
 Active Termite Crypto-Ransomware, Data Broker
Apos Security Data Broker
PlayBoy Locker Crypto-Ransomware, Data Broker, RaaS
HellCat Crypto-Ransomware, Data Broker
 Active KillSecurity 3.0 Crypto-Ransomware, Data Broker, RaaS
 Active INTERLOCK Crypto-Ransomware, Data Broker
Red lock in front of a honeycomb blue background with icons inside

Threat Landscape

WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025

See More

Related Blogs

Read more