
Behind The Attacks: The Ransomware Groups Defining Q1 2026
Time: 3pm BST / 10am EDT
Presenters: David Schnurstein and Rebecca Harpur
Ransomware continues to evolve at pace, but behind the headlines are the groups driving today’s most significant attacks.
In this webinar, we will take a closer look at the ransomware groups that defined Q1 2026, including who they are, how they operate, and where they are focusing their efforts. From newly emerged groups to rapidly scaling operations, we will break down the key players shaping the current threat landscape.
Join us as we examine:
- The most active and impactful ransomware groups in Q1 2026
- The industries and regions most heavily targeted
- How these groups are scaling, rebranding, and expanding their reach
- What these trends signal for the months ahead
We will also translate these insights into practical takeaways, helping organizations better understand their risk and strengthen defenses against evolving ransomware threats.
Share This Story, Choose Your Platform!
Related Posts
Inside OnyxC2: The New Stealer Targeting 210 Apps
Discover OnyxC2, the new malware-as-a-service stealer targeting 210 apps. Learn how it evades detection, steals credentials, and enables data theft.
The Canvas Ransomware Attack: How ShinyHunters Exposed a Global Education Security Crisis
ShinyHunters’ Canvas ransomware attack exposed millions of student records, highlighting growing risks of data exfiltration in education.
Free 14-Day AI Discovery & Data Exposure Assessment
BlackFog's state of ransomware May 2026 measures publicly disclosed and non-disclosed attacks globally.
The State of Ransomware: May 2026
BlackFog's state of ransomware May 2026 measures publicly disclosed and non-disclosed attacks globally.
BlackFog Honored with 2026 MSP Today Product of the Year Award
BlackFog’s ADX Vision won the 2026 MSP Today Product of the Year Award for helping MSPs detect Shadow AI risks and protect data.
Snowflake Data Breach Explained: Timeline, Impact, and Key Lessons
The 2024 Snowflake data breach exposed 165+ organizations through stolen credentials and absent MFA. Here’s the timeline, impact, and key lessons for cloud security.






