Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
Link thickness reflects how often one group's claim on a victim was followed by another's. Based on 87 victims discovered in 2024 and claimed by 2 or more groups — showing only the top 20 most common paths for readability.
Graph concept by Valéry Rieß-Marchive
| Added | Name | Victims in 2024 | Victims Overall | Last Victim |
|---|---|---|---|---|
| 2024-01-16 | Noname | 3 | 3 | 2024-01-16 |
| 2024-01-17 | Insane | 1 | 1 | 2024-01-17 |
| 2024-01-18 | Slug | 1 | 1 | 2024-01-18 |
| 2024-01-24 | Alphalocker | 17 | 31 | 2026-02-28 |
| 2024-02-10 | Ransomhub | 609 | 842 | 2025-03-31 |
| 2024-02-16 | Trisec | 3 | 3 | 2024-02-19 |
| 2024-02-20 | Mogilevich | 8 | 8 | 2024-03-01 |
| 2024-02-26 | Blackout | 9 | 12 | 2026-07-19 |
| 2024-03-08 | Donex | 5 | 5 | 2024-03-08 |
| 2024-03-21 | Killsec | 133 | 284 | 2026-07-23 |
| 2024-03-28 | Redransomware | 16 | 16 | 2024-06-12 |
| 2024-04-11 | Darkvault | 53 | 55 | 2025-01-06 |
| 2024-04-19 | Dispossessor | 344 | 344 | 2024-08-11 |
| 2024-04-19 | Hellogookie | 3 | 3 | 2024-04-19 |
| 2024-04-21 | Embargo | 16 | 40 | 2026-06-30 |
| 2024-04-22 | Apt73 | 66 | 160 | 2026-07-24 |
| 2024-04-22 | Qiulong | 8 | 8 | 2024-06-24 |
| 2024-04-25 | Dan0n | 33 | 33 | 2024-08-23 |
| 2024-04-29 | Apos | 5 | 16 | 2025-08-15 |
| 2024-04-29 | Spacebears | 42 | 147 | 2026-08-07 |
| 2024-05-01 | Underground | 21 | 26 | 2025-08-15 |
| 2024-05-03 | Flocker | 23 | 59 | 2025-07-31 |
| 2024-05-09 | Zerotolerance | 1 | 1 | 2024-05-09 |
| 2024-05-15 | Arcusmedia | 58 | 107 | 2026-07-26 |
| 2024-05-26 | Handala | 53 | 176 | 2026-04-08 |
| 2024-06-04 | Sensayq | 2 | 2 | 2024-06-04 |
| 2024-06-06 | Eldorado | 106 | 112 | 2025-01-22 |
| 2024-06-11 | Trinity | 11 | 18 | 2025-03-16 |
| 2024-06-20 | Cicada3301 | 45 | 75 | 2025-09-04 |
| 2024-07-01 | Braincipher | 26 | 69 | 2026-07-22 |
| 2024-07-10 | Vanirgroup | 3 | 3 | 2024-07-10 |
| 2024-07-12 | Ransomcortex | 4 | 4 | 2024-07-12 |
| 2024-07-16 | Fog | 86 | 189 | 2025-03-20 |
| 2024-07-17 | Madliberator | 16 | 16 | 2024-10-01 |
| 2024-07-29 | Lynx | 86 | 416 | 2026-08-06 |
| 2024-08-13 | Helldown | 36 | 36 | 2024-11-06 |
| 2024-09-10 | Valencialeaks | 5 | 5 | 2024-09-18 |
| 2024-09-16 | Orca | 3 | 5 | 2026-04-27 |
| 2024-09-30 | Nitrogen | 19 | 48 | 2026-06-03 |
| 2024-10-09 | Sarcoma | 48 | 141 | 2026-03-30 |
| 2024-10-13 | Interlock | 14 | 119 | 2026-07-31 |
| 2024-10-25 | Hellcat | 7 | 20 | 2025-04-10 |
| 2024-10-28 | Playboy | 1 | 1 | 2024-10-28 |
| 2024-11-13 | Kairos | 14 | 92 | 2026-07-30 |
| 2024-11-17 | Chort | 7 | 7 | 2024-11-22 |
| 2024-11-17 | Termite | 9 | 48 | 2026-07-28 |
| 2024-11-19 | Safepay | 46 | 546 | 2026-08-03 |
| 2024-11-27 | Argonauts | 13 | 13 | 2024-12-16 |
| 2024-12-04 | Funksec | 104 | 172 | 2025-03-18 |
| 2024-12-11 | Bluebox | 3 | 3 | 2024-12-17 |
| 2024-12-15 | Dragonransomware | 39 | 39 | 2024-12-17 |