TRIADA live cyber threat map
- Ransomware
- HeavyHeavy ransomware activity
- SomeSome ransomware activity
- In the newsMentioned in the news
Victims, last 24hVictims, 24h
54
33,676 all-time
Active gangs, 24hGangs, 24h
16
most active: thegentlemen
Newly exploited, 7dExploited, 7d
2
of 1,768 in KEV · 361 ransomware
Critical CVEs, 48hCritical, 48h
49
CVSS 9.0 or higher (NVD)
Botnet C2 onlineBotnet C2
0
none seen in the last 14 days
Mass scanners, todayScanners
25
SANS DShield top IPs
Live Threat Stream50 events
Most active gangs · last 100 claims
Most targeted countries
- 28
- 8
- 8
- 7
- 7
- 3
- 2
- 1
Targeted sectors
- Technology15
- Manufacturing14
- Retail & E-Commerce10
- Professional Services7
- Other7
- Financial Services6
Data sources
- CISA KEVnewest 2d ago
- abuse.ch Feodonewest 246d ago
- ransomware.live stats1
- SANS ISC DShield25
- NVDnewest 12h ago
- Security news RSSnewest 41m ago
- ransomware.livenewest 1h ago
- FIRST EPSS92
IP geolocation by IPinfo. Scanner and botnet dots sit at the country, not the exact location.
"Newest" is the age of the latest item each source has published. A quiet source is not a broken one. Dashboard fetched just now.