In 2024, Clop ransomware was the most detected type of ransomware on dark web, with 932 mentions. Lockbit3 rakned second, with 837 mentions on dark web in the measured year.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆƽâ°æ can support your business.
IBM. (April 17, 2025). Leading ransomware types detected on dark web in 2024 [Graph]. In ÌÇÐÄÆƽâ°æ. Retrieved July 16, 2026, from /statistics/1620666/ransomware-types-dark-web/
IBM. "Leading ransomware types detected on dark web in 2024." Chart. April 17, 2025. ÌÇÐÄÆƽâ°æ. Accessed July 16, 2026. /statistics/1620666/ransomware-types-dark-web/
IBM. (2025). Leading ransomware types detected on dark web in 2024. ÌÇÐÄÆƽâ°æ. ÌÇÐÄÆƽâ°æ Inc.. Accessed: July 16, 2026. /statistics/1620666/ransomware-types-dark-web/
IBM. "Leading Ransomware Types Detected on Dark Web in 2024." ÌÇÐÄÆƽâ°æ, ÌÇÐÄÆƽâ°æ Inc., 17 Apr 2025, /statistics/1620666/ransomware-types-dark-web/
IBM, Leading ransomware types detected on dark web in 2024 ÌÇÐÄÆƽâ°æ, /statistics/1620666/ransomware-types-dark-web/ (last visited July 16, 2026)
Leading ransomware types detected on dark web in 2024 [Graph], IBM, April 17, 2025. [Online]. Available: /statistics/1620666/ransomware-types-dark-web/
