CYFIRMA Research
Cyber defenders, listen up! The CYFIRMA Research podcast has some juicy intel on the latest cyber threats that are lurking in the shadows. Tune in to this security briefing to stay on top of emerging threats and be ready to tackle digital risk like never before.
CYFIRMA Research
CYFIRMA Research- Tracking Ransomware – December 2025
Stay ahead with CYFIRMA’s December 2025 Ransomware Report.
December marked the most active month of 2025 with 801 global ransomware victims, signaling a strong year-end escalation. Qilin surged to 175 victims, reinforcing its dominance, while Safepay and Sinobi posted sharp month-over-month growth, highlighting shifting group momentum. Ransomware operations increasingly adopted cartel-style, access-driven models, abusing trusted security tools, hypervisors, and enterprise file-sharing platforms to accelerate encryption and data-theft-only extortion.
The United States remained the primary target, followed by Western Europe, with expanding activity across Asia-Pacific and the Middle East. Professional services, manufacturing, IT, healthcare, and real estate were the most impacted sectors. Emerging groups like Nova continued to scale through data-centric extortion, signaling sustained threat expansion into 2026.
Link to the Research Report: TRACKING RANSOMWARE : DEC 2025 - CYFIRMA
#CyberSecurity #Ransomware #ThreatIntel #ETLM #CYFIRMA #Qilin #Safepay #Sinobi #Nova #DataExtortion #ExternalThreatLandscapeManagement
https://www.cyfirma.com/