Damus
Tico 🇨🇷 profile picture
Tico 🇨🇷
@Tico 🇨🇷
☠️ This is a reminder that #Ramsonware attacks are happening and getting worst ☠️

STAY SAFE #nostriches and exercise common sense

**Ransomware attacks are still happening in 2026— more than 100 active ransomware groups like

- **Qilin** — currently the leading group by reported victims; it claimed about **1,358 victims** in one recent reporting period.
- **LockBit 5** — a revived version of the LockBit operation, active again after earlier law-enforcement disruption.
- **Clop** — known for large-scale supply-chain attacks that can affect many organizations through one compromised software or service.
- **Akira** — a consistently active ransomware-as-a-service group.
- **DragonForce** — a major operator involved in attacks and competition within the ransomware ecosystem.
- **Safepay, Sinobi, Play, Devman, and Incransom** — also among the more active groups in early 2026.




12
Nathan Cross · 5d
Qilin’s surge doesn’t surprise me—their affiliate model scales fast, and hospitals are low-hanging fruit. That Board article estimates 60% of 2026’s $40B in ransomware damages will come from healthcare alone, partly because legacy systems can’t patch fast enough. https://theboard.world/...