Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
Link thickness reflects how often one group's claim on a victim was followed by another's. Based on 110 victims discovered in 2025 and claimed by 2 or more groups — showing only the top 20 most common paths for readability.
Graph concept by Valéry Rieß-Marchive
| Added | Name | Victims in 2025 | Victims Overall | Last Victim |
|---|---|---|---|---|
| 2025-01-07 | Morpheus | 12 | 23 | 2026-07-30 |
| 2025-01-24 | Gdlockersec | 5 | 5 | 2025-01-26 |
| 2025-01-27 | Babuk2 | 180 | 180 | 2025-04-23 |
| 2025-02-09 | Kraken | 25 | 25 | 2025-11-13 |
| 2025-02-19 | Linkc | 1 | 4 | 2026-04-08 |
| 2025-02-25 | Anubis | 41 | 102 | 2026-08-03 |
| 2025-02-27 | Runsomewares | 6 | 6 | 2025-08-13 |
| 2025-03-06 | Skira | 8 | 8 | 2025-11-18 |
| 2025-03-06 | Weyhro | 14 | 14 | 2025-08-11 |
| 2025-03-09 | Crazyhunter | 10 | 10 | 2025-03-30 |
| 2025-03-12 | Nightspire | 102 | 314 | 2026-08-07 |
| 2025-03-14 | Secp0 | 1 | 6 | 2026-04-29 |
| 2025-03-17 | Vanhelsing | 8 | 8 | 2025-04-05 |
| 2025-03-24 | Frag | 30 | 30 | 2025-06-12 |
| 2025-03-25 | Zerolockersec | 1 | 1 | 2025-03-25 |
| 2025-03-25 | Arkana | 6 | 6 | 2025-06-06 |
| 2025-03-25 | Zerolockersec | 1 | 1 | 2025-03-25 |
| 2025-03-26 | Ralord | 19 | 19 | 2025-04-27 |
| 2025-03-31 | Chaos | 31 | 79 | 2026-08-05 |
| 2025-04-06 | Bert | 7 | 7 | 2025-06-10 |
| 2025-04-06 | Devman | 152 | 184 | 2026-02-04 |
| 2025-04-08 | Crypto24 | 35 | 46 | 2026-04-17 |
| 2025-04-23 | Gunra | 20 | 51 | 2026-08-05 |
| 2025-04-23 | Silent | 6 | 6 | 2025-06-21 |
| 2025-04-28 | Nova | 82 | 178 | 2026-07-25 |
| 2025-05-02 | J | 41 | 41 | 2025-11-09 |
| 2025-05-05 | Imncrew | 12 | 12 | 2025-09-16 |
| 2025-05-06 | Silentransomgroup | 81 | 119 | 2026-08-07 |
| 2025-05-16 | Blacklock | 64 | 64 | 2025-07-02 |
| 2025-05-18 | Worldleaks | 114 | 175 | 2026-07-21 |
| 2025-05-26 | Datacarry | 16 | 16 | 2025-12-06 |
| 2025-05-27 | Direwolf | 59 | 75 | 2026-06-12 |
| 2025-06-04 | Global | 32 | 32 | 2025-08-20 |
| 2025-06-10 | Teamxxx | 12 | 12 | 2025-08-04 |
| 2025-06-10 | Walocker | 1 | 1 | 2025-06-10 |
| 2025-06-11 | Warlock | 78 | 78 | 2025-11-06 |
| 2025-06-27 | Kawa4096 | 17 | 17 | 2025-07-29 |
| 2025-07-04 | Satanlockv2 | 4 | 4 | 2025-07-07 |
| 2025-07-05 | Sinobi | 187 | 274 | 2026-05-08 |
| 2025-07-07 | D4rk4rmy | 18 | 18 | 2025-08-16 |
| 2025-07-07 | Payoutsking | 43 | 107 | 2026-08-05 |
| 2025-07-08 | Rebornvc | 3 | 3 | 2025-07-09 |
| 2025-07-22 | Securotrop | 28 | 40 | 2026-07-30 |
| 2025-07-29 | Beast | 46 | 70 | 2026-05-16 |
| 2025-07-31 | Bqtlock | 5 | 5 | 2025-10-11 |
| 2025-08-05 | Pear | 51 | 107 | 2026-07-30 |
| 2025-08-06 | Blacknevas | 22 | 39 | 2026-08-07 |
| 2025-08-26 | Cephalus | 19 | 19 | 2025-08-29 |
| 2025-08-30 | Desolator | 4 | 4 | 2025-09-01 |
| 2025-09-02 | Lunalock | 2 | 2 | 2025-09-16 |
| 2025-09-05 | Obscura | 27 | 33 | 2026-01-11 |
| 2025-09-05 | Yurei | 3 | 3 | 2025-09-09 |
| 2025-09-09 | Thegentlemen | 80 | 724 | 2026-08-07 |
| 2025-09-10 | Radar | 23 | 24 | 2026-04-29 |
| 2025-09-15 | Coinbasecartel | 61 | 187 | 2026-08-01 |
| 2025-09-17 | Blackshrantac | 36 | 43 | 2026-01-20 |
| 2025-10-03 | Shinyhunters | 45 | 139 | 2026-08-09 |
| 2025-10-08 | Kryptos | 5 | 5 | 2025-11-06 |
| 2025-10-10 | Brotherhood | 17 | 18 | 2026-01-06 |
| 2025-10-12 | Nasirsecurity | 1 | 1 | 2025-10-12 |
| 2025-10-12 | Radiant | 8 | 8 | 2025-10-29 |
| 2025-10-21 | Genesis | 24 | 109 | 2026-07-31 |
| 2025-10-23 | Tengu | 9 | 49 | 2026-03-07 |
| 2025-11-11 | Kazu | 7 | 9 | 2026-01-26 |
| 2025-11-26 | Benzona | 8 | 14 | 2026-01-30 |
| 2025-11-29 | Tridentlocker | 12 | 16 | 2026-04-27 |
| 2025-12-07 | Lockbit5 | 111 | 330 | 2026-08-05 |
| 2025-12-12 | Minteye | 5 | 5 | 2025-12-12 |
| 2025-12-18 | Ms13089 | 2 | 4 | 2026-05-05 |
| 2025-12-18 | Osiris | 1 | 3 | 2026-03-23 |