Priv8t is an independent cybersecurity research project and is not affiliated with the ransomware groups, threat actors, vendors or organizations referenced in its research.

We collect and analyze publicly available information about ransomware groups, infrastructure, tactics, vulnerabilities and victims.

Ransomware operations are classified as:

ACTIVE — currently operational.

INACTIVE — activity or the public operation has ceased.

DISRUPTED — materially disrupted by law enforcement or infrastructure intervention.

UNKNOWN — insufficient information to determine current status.