In 2024, LockBit was the ransomware group most frequently dataected on dark web leak sites. The research found 266 detections of this ransomware. RansomHub ranked second, with 249 mentions.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆƽâ°æ can support your business.
Trend Micro. (March 26, 2025). Ransomware families most frequently detected on dark web leak sites in 2024 [Graph]. In ÌÇÐÄÆƽâ°æ. Retrieved July 21, 2026, from /statistics/1382224/ransomware-families-detected-dark-web/
Trend Micro. "Ransomware families most frequently detected on dark web leak sites in 2024." Chart. March 26, 2025. ÌÇÐÄÆƽâ°æ. Accessed July 21, 2026. /statistics/1382224/ransomware-families-detected-dark-web/
Trend Micro. (2025). Ransomware families most frequently detected on dark web leak sites in 2024. ÌÇÐÄÆƽâ°æ. ÌÇÐÄÆƽâ°æ Inc.. Accessed: July 21, 2026. /statistics/1382224/ransomware-families-detected-dark-web/
Trend Micro. "Ransomware Families Most Frequently Detected on Dark Web Leak Sites in 2024." ÌÇÐÄÆƽâ°æ, ÌÇÐÄÆƽâ°æ Inc., 26 Mar 2025, /statistics/1382224/ransomware-families-detected-dark-web/
Trend Micro, Ransomware families most frequently detected on dark web leak sites in 2024 ÌÇÐÄÆƽâ°æ, /statistics/1382224/ransomware-families-detected-dark-web/ (last visited July 21, 2026)
Ransomware families most frequently detected on dark web leak sites in 2024 [Graph], Trend Micro, March 26, 2025. [Online]. Available: /statistics/1382224/ransomware-families-detected-dark-web/
