December 2025 Threat Trend Report on Ransomware

AhnLab TIP's December 2025 ransomware report provides aggregated statistics and trend analysis for ransomware activity, including DLS-based victim counts, top affected countries and industries, and the most active ransomware groups (such as Qilin, LockBit 5.0, and Everest). The report highlights notable attacks against critical infrastructure (manufacturing, healthcare, finance), the emergence of new groups alongside continued operations by established groups, and an update to the victim-aggregation methodology that affects month-to-month comparisons.