Home › Ransomware

Ransomware Groups Targeting Transportation

107 active ransomware groups targeting Transportation, ranked by claimed victims tracked in the Ninja Signal graph.

GroupClaimed victims in TransportationSanctioned
LockBit111⚠ Yes
Play43—
Qilin37—
TheGentlemen35—
N0n35—
RansomHub24—
Akira23—
BianLian22—
8Base19—
BlackCat / ALPHV17—
Black Basta16—
Pysa14—
Cl0p14—
Cactus14—
INC Ransom11—
Hive10—
DragonForce9—
Monti8—
Medusa8—
Lynx8—
Krybit8—
Avaddon8—
Settra7—
RA Group7—
Hunters International7—
Emperador7—
Conti / Wizard Spider7⚠ Yes
RagnarLocker6—
Nova6—
Aurora6—
Vice Society5—
Safepay5—
Royal5—
RansomHouse5—
NightSpire5—
KillSecurity5—
Everest5—
BlackSuit5—
Bashe5—
Arcus Media5—
Storm4—
Rhysida4—
Lamashtu4—
Direwolf4—
Deadlock4—
BlackByte4—
SpaceBears3—
Snatch3—
RansomEXX3—
Payload3—
NoEscape3—
Midas3—
MedusaLocker3—
Mallox3—
Knight3—
Fog3—
Eldorado3—
Dark Project3—
Cuba3—
BrainCipher3—
Apt733—
World Leaks2—
Stormous2—
Spook2—
Quantum2—
Pear2—
Onyx2—
Nitrogen2—
Money Message2—
MetaEncryptor2—
Meow2—
Marketo2—
M3RX2—
LV2—
Lorenz2—
Interlock2—
Helldown2—
Gunra2—
Dispossessor2—
DarkVault2—
CRPxO2—
Cloak2—
CiphBit2—
Chaos2—
BlackMatter2—
Audit Team2—
Anubis2—
AiLock2—
Abyss2—
Wallstreet1—
Vexy Ransomware1—
Trigona1—
Titan1—
3AM1—
Termite1—
Sarcoma1—
RansomedVC1—
Payload Bin1—
LostTrust1—
Kairos1—
Global Secret Group1—
FulcrumSec1—
FLocker1—
Embargo1—
dAn0n1—
Cicada33011—
Arvin Club1—

See every group on the ransomware index, read the analysis on the blog, or track new Transportation victims each morning in the Daily.

Track it daily

Ransomware moves every day. So does our paper.

The Probably Fine Daily is our morning threat-intelligence briefing — new victims, new groups, what actually matters, in plain English. Free.

Read today's Daily →Browse the archive