Ransomware Report 2025

The Dragon RaaS emerged in 2024.

Double extortion remains the most common approach.

A new quadruple extortion tactic is being used in ransomware campaigns, which builds on double extortion by using distributed denial-of-service (DDoS) attacks to disrupt business operations and harassing third parties (like customers, partners, and media) to increase the pressure on the victim.

Nearly half the cryptomining attacks analysed by Akamai researchers targeted nonprofit and educational organizations.

The TrickBot malware family has extorted more than US$724 million in cryptocurrency from victims since 2016.