Global Ransomware Threat Heatmap
Real-time visualization of ransomware activity based on analysis data from RansomBase. Explore intensity patterns and identify emerging hotspots worldwide.
Top Affected Countries
| Rank | Country | Incidents | % of Total |
|---|---|---|---|
| 1 | United States | 51 | 27.0% |
| 2 | Canada | 42 | 22.2% |
| 3 | Germany | 40 | 21.2% |
| 4 | United Kingdom | 19 | 10.1% |
| 5 | France | 12 | 6.3% |
| 6 | Australia | 9 | 4.8% |
| 7 | Norway | 6 | 3.2% |
| 8 | Italy | 3 | 1.6% |
| 9 | Spain | 3 | 1.6% |
| 10 | Sweden | 2 | 1.1% |
Top Ransomware Variants
| Rank | Variant | Incidents | % of Total |
|---|---|---|---|
| 1 | avaddon | 142 | 24.2% |
| 2 | pysa | 127 | 21.6% |
| 3 | ragnarlocker | 47 | 8.0% |
| 4 | clop | 34 | 5.8% |
| 5 | LockBit | 25 | 4.3% |
| 6 | revil | 20 | 3.4% |
| 7 | xinglocker | 19 | 3.2% |
| 8 | lorenz | 16 | 2.7% |
| 9 | Royal | 16 | 2.7% |
| 10 | Black Basta | 16 | 2.7% |
About This Data
This heatmap represents global ransomware activity based on authentic threat intelligence data collected from legitimate cybersecurity sources. The intensity indicates the concentration of identified ransomware incidents in each geographic region.
Data Collection: Authentic threat intelligence from cybersecurity news feeds, vulnerability databases, and public security advisories. All data is sourced from legitimate public cybersecurity resources.
Privacy: All data is collected from public sources only. No private or restricted information is accessed. The visualization represents authentic threat landscape trends.
Real-time data collection active Sources updated continuously