In Q3 2025, the ransomware ecosystem became more decentralized with 85 active groups, reflecting resilience despite law enforcement efforts. The resurgence of LockBit 5.0 indicates potential re-centralization, while new threat actors continue to emerge. #LockBit #RansomHub
Keypoints
- The number of active ransomware groups reached a record 85 in Q3 2025, showing increased fragmentation.
- Law enforcement takedowns have not significantly reduced overall ransomware activity, as actors quickly regroup or rebrand.
- LockBit 5.0’s return signals a possible shift toward centralized ransomware operations again.
- Emerging groups like DragonForce demonstrate branding strategies to build credibility and attract affiliates.
- Global targeting remains consistent, with a focus on high-value sectors such as finance, manufacturing, and healthcare.
Read More: https://thehackernews.com/2025/11/ransomwares-fragmentation-reaches.html