Live Feed
Ransomware & Cyberattack Threat Intel
Real-world ransomware activity, tracked and updated continuously — presented here so the scale of the threat is something you can see, not just read about.
All-Time Tracked
34,017 victims across 422 tracked groups
Last 30 Days
1,208 attacks disclosed
Data refreshed hourly — last pulled Nov 14, 2026 3:32am UTC
By Group
Top 10 ransomware groups
Show full group ranking (80)
#1
N0n
151
#2
thegentlemen
138
#3
qilin
118
#4
incransom
72
#5
akira
40
#6
SilentRansomGroup
36
#7
Booba Project
33
#8
settra
25
#9
play
22
#10
Whitearmor
22
#11
emperador
20
#12
safepay
20
#13
medusalocker
20
#14
lockbit5
20
#15
BrainCipher
20
#16
everest
19
#17
Climax Inc
17
#18
rhysida
17
#19
payload
15
#20
interlock
14
#21
krybit
14
#22
Vortex
14
#23
AuditTeam
14
#24
Majinahanashi
13
#25
Curious Worm
12
#26
aurora
12
#27
genesis
12
#28
Vexy Ransomware
11
#29
BYOD
11
#30
Orova
11
#31
Scarlettgroup
11
#32
pear
11
#33
Aoqin
10
#34
Dark Project
10
#35
metaencryptor
10
#36
everstake
10
#37
Helix
9
#38
osiris
8
#39
iah6477
8
#40
Global Secret Group
8
#41
Deadlock
8
#42
THE SEVEN DEADLY SINS
8
#43
Panzer
7
#44
Wallstreet
7
#45
HYFLOCK
7
#46
nightspire
7
#47
OBSOFT
7
#48
lamashtu
7
#49
bravox
6
#50
Doommageddon
6
#51
Shiba
6
#52
payoutsking
5
#53
anubis
5
#54
Redact
5
#55
Storm
5
#56
Barracuda
4
#57
Eclipse
4
#58
direwolf
4
#59
Falcon
4
#60
dragonforce
4
#61
Black X
3
#62
PixelLeaks
3
#63
spacebears
3
#64
ransomhouse
2
#65
chaos
2
#66
sarcoma
2
#67
crypto24
2
#68
ULose
2
#69
fulcrumsec
2
#70
Mimori
2
#71
cloak
2
#72
netrunner
1
#73
morpheus
1
#74
beast
1
#75
Destello
1
#76
Syntax
1
#77
clop
1
#78
nitrogen
1
#79
0x00
1
#80
blacknevas
1
Distribution
Group share of attacks
1,208attacks
N0n12.5%
thegentlemen11.4%
qilin9.8%
incransom6%
akira3.3%
SilentRansomGroup3%
Booba Project2.7%
settra2.1%
Other49.3%
By Sector
Top 10 sectors
Recent Activity
Most recently disclosed attacks in this range
Organization
Sector / Country
Group
Discovered
Grundbaulabor Trier GmbH
everest
Nov 14, 2026 3:32am UTC
I****** A*****
netrunner
Nov 14, 2026 1:30am UTC
K&A Industries
interlock
Nov 13, 2026 10:46pm UTC
Final Notice Before Publication
everest
Nov 13, 2026 10:44pm UTC
RE/MAX Germany
Panzer
Nov 13, 2026 9:51pm UTC
i*t*r***t.com
Curious Worm
Nov 13, 2026 8:53pm UTC
t**a.com
Curious Worm
Nov 13, 2026 8:53pm UTC
Frey Properties of Highland LLC
play
Nov 13, 2026 8:29pm UTC
ARRB Group
play
Nov 13, 2026 8:29pm UTC
Advantage Archives
incransom
Nov 13, 2026 8:14pm UTC
This data reflects publicly disclosed ransomware activity. Cyber Insights presents it purely for public awareness — to make the scale and pace of ransomware activity tangible, not to sell any product or service.
Data source: Ransomware.live