About Ransomware Tracker
Timely, technically accurate ransomware intelligence for defenders, security teams, and decision-makers.
Mission
Ransomware Tracker aggregates and analyzes threat intelligence on ransomware groups, campaigns, and tactics to help security professionals understand the threat landscape and make better defensive decisions.
We focus on actionable intelligence: group profiles that explain how adversaries actually operate, campaign alerts with specific indicators and detection guidance, and strategic reports on trends shaping the ransomware ecosystem.
Content Categories
In-depth profiles of active ransomware groups — infrastructure, encryptor capabilities, affiliate programs, targeting preferences, and operational history.
Active campaign analysis with specific TTPs, indicators of compromise, attack chain details, and defensive recommendations tied to ongoing incidents.
Strategic analysis of ransomware trends, payment economics, ecosystem dynamics, and the supporting criminal infrastructure enabling ransomware operations.
Coverage of law enforcement operations, researcher-developed decryptors, and key tool releases that help ransomware victims recover without paying.
Disclaimer
All content on Ransomware Tracker is for informational and educational purposes. Information is derived from publicly available threat intelligence, security research publications, incident response reports, and analysis of open-source data.
We do not publish victim-identifying information beyond what has already been made public by threat actors or confirmed in official communications. We do not provide operational support for threat actors or assist in any ransomware-related criminal activity.
Stay Updated
Subscribe to the RSS feed for automatic updates when new intelligence is published.
Subscribe via RSS