In Q3 2025, the ransomware landscape showed significant decentralization, with 85 active groups and 1,590 victims disclosed across various leak sites, indicating sustained high activity despite law enforcement efforts. The quarter saw the emergence of 14 new ransomware brands, highlighting the resilience of affiliates post-takedown. Notably, LockBit made a reappearance, further emphasizing the evolving nature of this threat. The overall trend underscores the ongoing challenges in combating ransomware effectively.
