Top 10 Active Ransomware Gangs: Geopolitics, Origin and Targets

Discover the geopolitical alignments, target countries, and industries of the most active ransomware groups currently in operation and learn how to protect your organization from their attacks.

CyberSec_Sai
Coinmonks
Published in
6 min readJan 27, 2023

--

Introduction:

Ransomware is a type of malicious software that encrypts a victim’s files and demands payment in exchange for the decryption key. Ransomware attacks have been on the rise in recent years, with large organizations and individuals alike falling victim to these types of attacks. The purpose of this article is to provide a detailed overview of the top 10 ransomware gangs currently active, including information on their geopolitical alignment, target countries, and target industries.

Factors for Alignment:

Geopolitical alignment of ransomware gangs can be determined by a number of factors, including the language used by the hackers, the location of their command and control servers, and the location of their target victims. Additionally, the tactics, techniques, and procedures used by the ransomware gangs can also provide clues as to their origin and alignment.

Top 10 Ransomwares:

--

--

CyberSec_Sai
Coinmonks

Security Researcher, CTI, Author. Writes About: Cybersecurity, Threat Intelligence, Darkweb, Tech, AI/ML, Crypto, Money, Investing, Finance, Startup, Freelance