Ransomware Tracker

Signals

NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07

· Live DataReal-time ransomware group directory and victim-claim tracker

All intelligence content is fictional, redacted and defensive. No real credentials, stolen data, exploit instructions, malware links, payment information or private personal data is published. This tracker monitors publicly leaked claims. No payment addresses, operational instructions, or direct links to threat actor infrastructure are provided.

Powered by Dragons Community Ransomware Tracker — auto-updated every 30 minutes. Victims · Country · Industry · Analytics · Notes · Decryptors

25,656

Total Victims

386

Groups Tracked

Active Groups

Today

Top Groups by Victims

View all →

01lockbit32021 02qilin1383 03akira1295 04play1140 05clop1126 06lockbit21005 07ransomhub842

163

Decryptors

Ransom Notes

241

Negotiations

View

Statistics

Latest Victims

View all →

ATMS

incransom · IN

Aug 7

www.jerryleigh.com

lynx · —

Aug 6

www.talbotdes.org

lynx · —

Aug 6

Primary Eye Care

dragonforce · —

Aug 6

EduSpa

dragonforce · —

Aug 6

Pharma Test Apparatebau AG

akira · —

Aug 6

Basic Grain Products

akira · —

Aug 6

vprj.org

incransom · US

Aug 6

One Community FCU

dragonforce · —

Aug 6

P. A. Inc. (Performance Alloys)

dragonforce · —

Aug 5