Ransomware Tracker
Ransomware Analysis powered by the WatchGuard Red Cell team
Coverage
Total Ransomware
405
Known Victims
4,915
Total Decryptors
36
Active Groups
159
Ransomware Tracker Map
The map
Hover over a country to see the number of tracked victims.
Ransomware Database
| Name | Ransomware Type | First Seen Sort ascending | Last Seen | |
|---|---|---|---|---|
| Active | Prinz Eugen | Crypto-Ransomware, Data Broker | ||
| RebornVC | Data Broker | |||
| Active | The Gentlemen | Builder, Crypto-Ransomware, Data Broker, HumOR, RaaS | ||
| D4RK4RMY | Crypto-Ransomware, Data Broker, RaaS | |||
| Active | BlackField | Crypto-Ransomware, Data Broker | ||
| Devman 2.0 | Crypto-Ransomware, Data Broker, RaaS | |||
| BlackByte-Crux | Crypto-Ransomware, Data Broker, HumOR | |||
| Sinobi | Crypto-Ransomware, Data Broker | |||
| Active | Payouts King | Data Broker | ||
| Active | Kazu | Data Broker | ||
| Active | PEAR | Data Broker | ||
| KaWa4096 | Crypto-Ransomware, Data Broker | |||
| Cephalus | Crypto-Ransomware, Data Broker | |||
| Active | Warlock | Crypto-Ransomware, Data Broker | ||
| Active | W.A. | Crypto-Ransomware, Data Broker |
Global Threat Analysis
WatchGuard Fireboxes each blocked an average of 1260 malware threats in H2 2025
See More
Related Blogs
Article
85% of Attacks Leverage RDP for Lateral Movement
Article
85% of Attacks Leverage RDP for Lateral Movement
Discover why lateral movement is hard to detect and how to catch it before it’s too late.
Article
Key Lessons from the Major Ransomware Attacks in Recent Months
Article
Key Lessons from the Major Ransomware Attacks in Recent Months
Learn from the ransomware attacks in recent months and find out how to protect your company against advanced threats.
Article
Zero Trust for Mid-Market: Why Modern IT Security Assumes Attacks Will Succeed
Article
Zero Trust for Mid-Market: Why Modern IT Security Assumes Attacks Will Succeed
Why mid-market security must assume breaches will happen. Learn how Zero Trust, EDR, MFA, and 24/7 monitoring reduce real-world risk.