Syhunt 2023 Ransomware Threat Update
Paper by Syhunt Icy Team. January 25. 2023
Last year, Syhunt published a lenghty report about the ransomware threat. Now the Syhunt Icy Team has partnered with The Hunter to publish a major update: a list of the active ransomware groups with the increase in victims since the last report and two lengthy articles containing the profiles of 25 ransomware groups. The two article cover the top 15 most dangerous and active ransomware groups as well as 10 notable groups of the recent past. See the links to the articles below.
- Inside the World of The Top 15 Most Dangerous Ransomware Groups
- A Look At The Most Notorious Ransomware Groups Of The Recent Past
2023 Active Groups
Group Name | Total of Data Exfiltrated | Total of Victim Organizations |
lockbit | Over 61 TB | 885 |
ragnar_locker | Over 19.6 TB | 45 (+16) |
lv_blog | Over 9.3 TB | 66 (+24) |
snatch | Over 6 TB | 53 (+24) |
alphavm | Over 4.8 TB | 71 (+51) |
quantum | Over 2.9 TB | 55 (+46) |
everest | Over 2 TB | 62 (+13) |
ransomexx | Over 1.7 TB | 47 (+12) |
avoslocker | Undetermined | 89 |
cl0p | Undetermined | 129 |
vice_society | Undetermined | 99 |
bianlian | Undetermined | 74 |
lorenz | Undetermined | 53 |
cuba | Undetermined | 25 |
Inactive Groups
Group Name | Total of Data Exfiltrated (150TB) | Total of Victim Organizations |
REvil | 44.1 TB | 282 |
conti | 26.3 TB | 741 (+141) |
pay2key | 14.3 TB | 6 |
blackmatter | 8.3 TB | 33 |
lockdata | 4 TB | 7 |
midas | 3.4 TB | 22 |
bonaci_group | 3.3 TB | 3 |
xing_team | 3.1 TB | 19 |
payload_bin | 1.4 TB | 7 |
babuk | 1 TB | 5 |
suncrypt | 778.0 GB | 8 |
arvinclub | 426 GB | 7 (+2) |
dopple_leaks | 399.3 GB | 198 |
grief | 259.1 GB | 79 |
pysa | Undetermined | 249 |
blackbyte | Undetermined | 43 |
onyx | Undetermined | 15 |
prometheus | Undetermined | 36 |