🦠 Ransomware & Malware

Ransomware's Profit Squeeze: 2025 Data Shows Crooks Scrambling for Survival

Ransomware gangs posted a record number of victims last year, yet their cash flow's drying up. Google's latest intel unmasks the scramble: more exploits, virtualization hits, and a pivot to raw extortion.

Chart of top ransomware data leak sites and families in 2025 from Google Threat Intelligence

⚡ Key Takeaways

  • Ransomware profits declining due to better defenses and disruptions, but victim posts hit records. 𝕏
  • Key TTP shifts: VPN exploits, 77% data theft, 43% virtualization targeting, REDBIKE at 30%. 𝕏
  • 2026 outlook: More extortion, AI/Web3 tweaks, secondary monetization — harden now. 𝕏
Published by

theAIcatchup

Threat intelligence. Zero noise.

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by Mandiant Blog

Stay in the loop

The week's most important stories from theAIcatchup, delivered once a week.