BF Blog 2025 Gangs featured image
By |Last Updated: June 11th, 2025|7 min read|Categories: Ransomware|

With 48 new ransomware variants emerging in 2024, marking a significant 65% increase from the previous year, it’s clear why ransomware remains one of the top concerns for cybersecurity professionals globally.

RansomHub stands out as the most significant new variant of 2024, with 586 attacks recorded since its debut in February. Other notable players, such as Funksec and Kill, have also proven to be formidable threats.

Here are some key stats from 2024’s new ransomware variants:

  • Only 4 out of 48 new variants were one-time attackers.
  • New variants were behind 32% of all undisclosed attacks in 2024.
  • July saw the highest number of new gangs, with 8 making their debut that month.
  • By November and December, gangs that emerged in 2024 accounted for more than 50% of attacks during those months.

This year, we’re decided to continue to track new ransomware gangs and their victims and will keep you updated as and when we discover them.

January

There were no new ransomware variants recorded in January

February

March

Ox Thief

Victims claimed: Broker Educational Sales & Training

Crazy Hunter

Victims claimed: Changhua Christian Hospital, Asia University, Mackay Hospital Taiwan, Huacheng Electric, Johnson Fitness, KD Panels, Netronix Technology Co

Weyhro

Victims claimed: Avantune, Fragola S.p.A, MBI International, Resnick & Caffrey, CELCO Inc, Montgomery, Little & Soran, Terra Construction, Valens Bank Pay Exchange, Adriatic Glass & Mirrors, McMillan James Equipment Company, 101 Arch Street, Synergy Investments

Skira Team

Victims claimed: Krisala Developers, CCL Products, Carruth Compliance Consulting, Lawyers Diary and Manual, Van Metropolitan Municipality, Independent Title Agency LLC, Dedicated Web Consultants Inc

Secp0

Arkana

Victims claimed: WideOpenWest, Oregon Surveillance, INFINOX Global, Anglo American, Synopsys, Ticketmaster

VanHelsing

Victims claimed: City of Belleville, ATOS Racks, MEDS Pharmacy, Studio Vallone, Compumedics Limited, CAS-CHILE, Alert Enterprise, Law Offices of David Kohn

NightSpire

Victims claimed: Hydro Vacuum, Baily International of Atlanta, Tophe, Raja Ferry Port Public, Far East Consortium International, Business Ledger Limited, Tanaka Holdings, Wilson RE, Waihong Environmental Services, Bridgewater Retirement Community, Sanyo Special Steel Manufacturing India, Sumitomo Cutting Tools EMEA, MISR AL MAHABA HOSPITAL, Khazmodan Studios, Mid-America Pool Renovation, Sisnet Costa Rica, Emo Trans Chile S.A., Compliance Consulting Group, Wilmington Personal Injury Lawyer, Zaphira Uniformes, PT Pupuk Indonesia, Sistel SRL, Audit Accounting Advisory Taxes, Promenade Village Dental, Municipality of Ardon, Poviat Labor Office Zory, W8-Textil, Nippon Ceramics, InterLogic Inc, OMCI SpA, Czech Water Polo Association, Secretaria de Educacion de Veracruz, STORT|Sundsvall AB, M-Power Information Co, INI Investments, MFR Cultivons les Reussites, Melco Capital Pte Ltd, EPK, APTA Special Employment Center, Future Microfinance Association, North Kitsap School District, Ertl Elecktro Feldbach, Branchcore, Calcada Wines, Lake Tahoe Reno, TeamLease, Ecoinside, Julia Evans Accountants Ltd, TAN Global Logistics, Lars Myhre Ostfold AS, Simalga, Valentin Hotels (Spain), Datatrykk, Hospital Jose Agurto Tello de Chosica, Pistolero, QuadMiners (South Korea), The Green Flame Gas Co, Ingonyama Trust Board, Al Tadawi Speciality Hospital, Petroquim Chile

Frag

Victims claimed: SeaQuest Seafood, Woodbine Hospitality, Superior Technology Inc, Stuwarooji, Statewide Enterprises, QuiltCraft, Rahnama Law, Opulent, Nelson Law Firm, Komoto Healthcare, iTek Services Inc, Moody Homes, Maine Highlands Federal Credit Union, Lake Beverage Corp, Franklin Products, Texas Fifth Wall Roofing Systems, Ellis Glass & Mirror Ltd, Community Management Inc, California Gasket and Rubber Corporation, Aeroworx, Ameriken Die Supply, Southwest Inspection and Testing, Salvi Schostok and Pritchard, Red Credit Solutions, Kontane Logistics, Bunting Capital Management, Andrew Davidson, Source Photonics

RALord

Victims claimed: Centrale Nantes, Tomio Ingeniería S.A., IHARA Defensivos Agricolas, Formosa Chang, Pere Claver Group, Al Hejailan, ARRCO, Bettin Solucoes en Informatica, Agromate Holdings Sdn Bhd, Rawafid Industrial, Bio-Clima Service, Helukabel GmbH, Diallog Telecommunications, Hasbco, Newhotel Software, Municipality of Pisa, Sjerp and Jongeneel

April

May

June

This information has been collated from various online sources.

Last updated 06/11/2025 14:26

Share This Story, Choose Your Platform!

Related Posts