- Home
- Z7 Cyber intelligence
- Most DANGEROUS CYBERCRIME GROUPS
Most Dangerous Cybercrime Groups
2025 Threat Landscape
Ransomware payments
$
0
million
Largest single ransom
$
0
million
UK ransomware fatality confirmed
0
st
Executive Summary
The ransomware ecosystem has fundamentally transformed in 2024 and 2025. Qilin now commands 29% market share with 701+ victims. Scattered Spider entered operational pause following arrests. North Korean state actors adopted RaaS tools for the first time.
Groups Profiled
- Elite Social Engineering: Scattered Spider, LAPSUS$, The Com
- Tier 1 RaaS: LockBit, ALPHV/BlackCat, Clop, RansomHub, Qilin
- Tier 2 Operations: Black Basta, Akira, Medusa, Play, Rhysida
- Hacktivists: KillNet, Anonymous Sudan, CyberAv3ngers
- Data Theft Specialists: ShinyHunters, Initial Access Brokers
This page provides an executive-level preview only.
Detailed analysis, scoring methodology, and proprietary frameworks are available in the full intelligence report.