Key Findings – Q2 2025 Ransomware Trends Ransomware-as-a-Service (RaaS) group disruptions: Several major ransomware groups have disappeared, leaving a fragmented ecosystem. Slight decline in public victim extortion: Fewer victims were named on data leak sites this quarter, likely due to law enforcement pressure and changing attacker tactics. Continuous shift toward data extortion: Attackers continue moving away from encryption, focusing instead on stealing and leaking data to force payment. Ransomware group Qilin leads with new extortion tools: Qilin was the most active group in Q2, using innovative methods to pressure victims and boost ransom payments. In Check Point Research’s latest Ransomware […]
The post Ransomware in Q2 2025: AI Joins the Crew, Cartels Rise, and Payment Rates Collapse appeared first on Check Point Blog.