Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business
Last 7 days
Last 30 days
Last 90 days
Online groups
| Group | First Victim * | Last Victim | Victims (7d) | Victims (30d) | Victims (90d) | Online |
|---|---|---|---|---|---|---|
| handala | 2024-04-05 | 2025-12-28 | 2 | 13 | 24 | Online |
| dragonforce | 2022-10-20 | 2025-12-27 | 7 | 32 | 75 | Online |
| qilin | 2022-10-08 | 2025-12-27 | 41 | 168 | 458 | Online |
| safepay | 2023-11-10 | 2025-12-27 | 19 | 57 | 86 | Online |
| morpheus | 2025-01-07 | 2025-12-27 | 1 | 2 | 3 | Offline |
| akira | 2023-04-12 | 2025-12-26 | 11 | 71 | 231 | Online |
| lynx | 2023-05-22 | 2025-12-26 | 6 | 13 | 30 | Online |
| chaos | 2025-02-19 | 2025-12-26 | 1 | 6 | 14 | Online |
| lockbit5 | 2024-08-17 | 2025-12-26 | 49 | 78 | 79 | Online |
| everest | 2021-09-09 | 2025-12-25 | 3 | 10 | 40 | Online |
| devman | 2023-06-07 | 2025-12-25 | 5 | 42 | 82 | Online |
| nova | 2025-03-22 | 2025-12-25 | 2 | 13 | 41 | Online |
| incransom | 2023-08-06 | 2025-12-24 | 3 | 26 | 104 | Online |
| killsec | 2024-02-21 | 2025-12-24 | 1 | 8 | 19 | Online |
| worldleaks | 2022-06-23 | 2025-12-24 | 2 | 12 | 24 | Online |
| thegentlemen | 2024-04-03 | 2025-12-24 | 5 | 11 | 31 | Online |
| medusa | 2023-01-11 | 2025-12-23 | 1 | 6 | 33 | Online |
| spacebears | 2024-04-25 | 2025-12-23 | 1 | 7 | 15 | Online |
| anubis | 2025-02-25 | 2025-12-23 | 3 | 11 | 27 | Online |
| crypto24 | 2023-12-13 | 2025-12-23 | 1 | 3 | 9 | Online |
| blackshrantac | 2025-09-17 | 2025-12-23 | 1 | 6 | 29 | Online |
| interlock | 2023-12-01 | 2025-12-22 | 1 | 6 | 17 | Online |
| direwolf | 2025-04-17 | 2025-12-22 | 6 | 6 | 18 | Online |
| sinobi | 2025-03-24 | 2025-12-22 | 4 | 54 | 139 | Online |
| securotrop | 2025-06-11 | 2025-12-22 | 1 | 3 | 12 | Online |
| benzona | 2025-11-26 | 2025-12-22 | 1 | 3 | 8 | Online |
| play | 2022-11-26 | 2025-12-20 | 0 | 4 | 64 | Online |
| coinbasecartel | 2023-05-26 | 2025-12-20 | 0 | 22 | 50 | Online |
| cloak | 2023-08-24 | 2025-12-19 | 0 | 2 | 6 | Online |
| rhysida | 2023-06-05 | 2025-12-19 | 0 | 10 | 35 | Online |
| tridentlocker | 2025-11-09 | 2025-12-19 | 0 | 3 | 11 | Online |
| clop | 2020-03-13 | 2025-12-18 | 0 | 1 | 112 | Online |
| ms13089 | 2025-12-18 | 2025-12-18 | 0 | 2 | 2 | Online |
| termite | 2023-05-11 | 2025-12-17 | 0 | 1 | 2 | Online |
| nitrogen | 2024-05-01 | 2025-12-16 | 0 | 3 | 5 | Online |
| nightspire | 2025-02-17 | 2025-12-16 | 0 | 5 | 26 | Online |
| obscura | 2025-07-16 | 2025-12-15 | 0 | 5 | 18 | Online |
| minteye | 2025-12-07 | 2025-12-12 | 0 | 5 | 5 | Online |
| pear | 2023-08-18 | 2025-12-11 | 0 | 2 | 14 | Online |
| kazu | 2025-11-06 | 2025-12-11 | 0 | 2 | 5 | Online |
| abyss | 2023-03-21 | 2025-12-10 | 0 | 1 | 1 | Online |
| brotherhood | 2025-04-04 | 2025-12-10 | 0 | 2 | 16 | Online |
| osiris | 2025-12-10 | 2025-12-10 | 0 | 1 | 1 | Online |
| stormous | 2022-03-22 | 2025-12-08 | 0 | 4 | 13 | Offline |
| genesis | 2024-05-07 | 2025-12-08 | 0 | 8 | 15 | Online |
| tengu | 2025-10-23 | 2025-12-08 | 0 | 1 | 9 | Offline |
| SilentRansomGroup | 2022-06-07 | 2025-12-07 | 0 | 2 | 7 | Online |
| embargo | 2024-04-17 | 2025-12-06 | 0 | 1 | 2 | Online |
| datacarry | 2024-06-26 | 2025-12-06 | 0 | 1 | 2 | Offline |
| lockbit3 | 2021-12-26 | 2025-12-05 | 0 | 1 | 1 | Online |
| ciphbit | 2023-09-14 | 2025-12-02 | 0 | 1 | 6 | Online |
| ransomhouse | 2021-06-01 | 2025-12-01 | 0 | 1 | 25 | Online |
| radar | 2024-01-22 | 2025-12-01 | 0 | 1 | 10 | Online |
| payoutsking | 2025-04-17 | 2025-11-25 | 0 | 0 | 18 | Online |
| kairos | 2024-06-26 | 2025-11-24 | 0 | 0 | 8 | Offline |
| sarcoma | 2024-07-09 | 2025-11-20 | 0 | 0 | 5 | Online |
| beast | 2023-12-19 | 2025-11-19 | 0 | 0 | 10 | Online |
| skira | 2025-03-06 | 2025-11-18 | 0 | 0 | 1 | Offline |
| medusalocker | 2021-11-03 | 2025-11-17 | 0 | 0 | 1 | Offline |
| alphalocker | 2024-01-24 | 2025-11-16 | 0 | 0 | 9 | Online |
| kraken | 2024-02-12 | 2025-11-13 | 0 | 0 | 2 | Online |
| warlock | 2025-04-02 | 2025-11-06 | 0 | 0 | 17 | Online |
| kryptos | 2025-10-08 | 2025-11-06 | 0 | 0 | 5 | Offline |
| J | 2025-02-17 | 2025-11-01 | 0 | 0 | 4 | Online |
| BrainCipher | 2024-07-01 | 2025-10-29 | 0 | 0 | 5 | Online |
| radiant | 2025-10-12 | 2025-10-29 | 0 | 0 | 8 | Offline |
| blacknevas | 2023-04-24 | 2025-10-21 | 0 | 0 | 5 | Online |
| bqtlock | 2025-07-31 | 2025-10-11 | 0 | 0 | 2 | Offline |
| shinyhunters | 2024-04-23 | 2025-10-11 | 0 | 0 | 6 | Online |
| nasirsecurity | 2025-10-05 | 2025-10-05 | 0 | 0 | 1 | Offline |
| gunra | 2025-04-07 | 2025-10-01 | 0 | 0 | 1 | Online |
* First victim date uses estimated attack date when available, otherwise published date.