TRIADA live cyber threat map
- Ransomware
- HeavyHeavy ransomware activity
- SomeSome ransomware activity
- In the newsMentioned in the news
Victims, last 24hVictims, 24h
22
leak-site claims
Active gangs, 24hGangs, 24h
8
most active: n0n
Newly exploited, 7dExploited, 7d
8
of 1,756 in KEV · 361 ransomware
Critical CVEs, 48hCritical, 48h
12
CVSS 9.0 or higher (NVD)
Botnet C2 onlineBotnet C2
0
none seen in the last 14 days
Mass scanners, todayScanners
0
SANS DShield top IPs
Live Threat Stream45 events
Most active gangs · last 100 claims
Most targeted countries
- 26
- 11
- 4
- 4
- 3
- 3
- 3
- 2
Targeted sectors
- Manufacturing17
- Professional Services16
- Technology14
- Healthcare8
- Retail & E-Commerce8
- Other7
Data sources
- ransomware.live stats0
- SANS ISC DShielderror
- CISA KEVnewest 3d ago
- abuse.ch Feodonewest 235d ago
- Security news RSSnewest 11m ago
- ransomware.livenewest 6h ago
- NVDnewest 24m ago
- FIRST EPSS65
IP geolocation by IPinfo. Scanner and botnet dots sit at the country, not the exact location.
"Newest" is the age of the latest item each source has published. A quiet source is not a broken one. Dashboard fetched just now.