The third quarter of 2025 witnessed a significant evolution in the ransomware landscape, characterized by a notable increase in active groups. With 85 active ransomware and extortion groups monitored, this marks the most fragmented and decentralized ransomware ecosystem to date. Statistics reveal that 1,590 victims were disclosed across 85 different leak sites, illustrating persistent and high levels of activity despite ongoing law enforcement efforts to combat these cyber threats.
Moreover, the launch of 14 new ransomware brands during this quarter demonstrates the resilience and dynamic nature of these criminal enterprises. Affiliates of existing groups are quick to regroup and create new brands following law enforcement takedowns, highlighting a continuous cycle of attacks and rebranding. The recent resurgence of notorious groups, including the reappearance of LockBit, emphasizes the challenges faced in mitigating ransomware attacks and the urgent need for robust cybersecurity measures.
👉 Pročitaj original: The Hacker News
