Power Rankings: Q2-2025 Ransomware Malicious Quartile

This Halcyon Q2-2025 ransomware power rankings summarizes the extortion landscape, noting DragonForce's rise to leader status, removal of inactive groups, several new emergent actors, and the decline of formerly dominant groups; it highlights evolving TTPs including BYOVD kernel bypass, VMware ESXi-targeted payloads, RMM tool abuse for lateral movement, and modular payloads for rapid, stealthy compromise, emphasizing continued high operational and financial risk to organizations.