Syhunt 2023 Ransomware Threat Update

Paper by Syhunt Icy Team. January 25. 2023

Last year, Syhunt published a lenghty report about the ransomware threat. Now the Syhunt Icy Team has partnered with The Hunter to publish a major update: a list of the active ransomware groups with the increase in victims since the last report and two lengthy articles containing the profiles of 25 ransomware groups. The two article cover the top 15 most dangerous and active ransomware groups as well as 10 notable groups of the recent past. See the links to the articles below.

2023 Active Groups

Group NameTotal of Data ExfiltratedTotal of Victim Organizations
lockbitOver 61 TB885
ragnar_lockerOver 19.6 TB45 (+16)
lv_blogOver 9.3 TB66 (+24)
snatchOver 6 TB53 (+24)
alphavmOver 4.8 TB71 (+51)
quantumOver 2.9 TB55 (+46)
everestOver 2 TB62 (+13)
ransomexxOver 1.7 TB47 (+12)
avoslockerUndetermined89
cl0pUndetermined129
vice_societyUndetermined99
bianlianUndetermined74
lorenzUndetermined53
cubaUndetermined25

Inactive Groups

Group NameTotal of Data Exfiltrated (150TB)Total of Victim Organizations
REvil44.1 TB282
conti26.3 TB741 (+141)
pay2key14.3 TB6
blackmatter8.3 TB33
lockdata4 TB7
midas3.4 TB22
bonaci_group3.3 TB3
xing_team3.1 TB19
payload_bin1.4 TB7
babuk1 TB5
suncrypt778.0 GB8
arvinclub426 GB7 (+2)
dopple_leaks399.3 GB198
grief259.1 GB79
pysaUndetermined249
blackbyteUndetermined43
onyxUndetermined15
prometheusUndetermined36

Contact