Back to ransomware overview
Group Quadrants
50 active groups plotted by activity (total tracked victims) vs recency (days since last observed activity). Click a dot to open the group profile.
Activity × Recency
Top-right is the danger zone: high victim volume and still active. Bottom-left = small, dormant.
Titan (100+ victims) Major (30–99) Mid (10–29) Minor (1–9)