Top Ransomware Groups June 2025: Qilin Reclaims Top Spot

Cyble's June ransomware intelligence reports Qilin as the top ransomware group with 86 claimed victims and a preliminary total of 377 ransomware incidents for the month; it documents attacks on telecom, blockchain, healthcare, transportation and logistics organizations, emergence of new RaaS programs and ransomware strains (including CyberVolk, Nova/RALord, Chaos, Kawa4096), mentions leak sites and specific indicators (extensions and ransom note names), and advises resilience measures such as segmentation, zero trust, immutable backups, hardened endpoints, monitoring, and incident response preparedness.