Most abused TLD

The chart below shows the most abused TLDs that are being used by miscreants to host Ransomware infrastructure, such as botnet C&Cs and payment sites. The chart only considers fraudulent domain registrations, which means domain names that have been registered by miscreants for the purpose of hosting Ransomware infrastructure. Hijacked websites are not included in the chart.

Malware samples per Ransomware family

The chart below shows the number of malware samples per Ransomware family processed by Ransomware Tracker in the past 90 days.