India, Nov. 20 -- The ransomware landscape in Q3 2025 has reached a significant turning point. Despite several law enforcement operations earlier in the year, attack volumes remain historically high. Check Point Research identified 1,592 new victims across 85 active extortion groups, marking a 25% increase compared with the same period last year. India ranked ninth globally, accounting for around 2% of all ransomware attacks. Although well-known groups such as RansomHub and 8Base have disappeared, the gaps they left have been filled rapidly by smaller threat actors, resulting in an increasingly fragmented ransomware-as-a-service (RaaS) ecosystem.

The number of active ransomware groups rose to a record 85 in Q3, including 14 newly formed ...