Barracuda, a relatively new ransomware group that describes itself as financially motivated rather than government sponsored.

Dire Wolf is an emerging, financially motivated human-operated ransomware group and malware strain first identified in May 2025. It primarily focuses on high-impact industries like manufacturing, technology, finance, construction, and healthcare across global regions including the U.S., Asia, and Europe.

The Gentlemen (tracked by Microsoft as Storm-2697) is a financially motivated Ransomware-as-a-Service (RaaS) cybercriminal group that emerged in mid-2025. Known for utilizing a double-extortion tactic—encrypting enterprise files while exfiltrating sensitive data to threaten public leaks—the group has quickly grown into one of the most active threat operations globally.

Termite is a cyber extortion threat group that surfaced in late 2024. It is known for using modified Babuk ransomware source code, executing double-extortion attacks, and targeting major global supply chain and corporate networks.

TheUSERS007 is an emerging cyberextortion group. TheUSERS007 claimed to use a self-learning, adaptive artificial intelligence engine dubbed “Venomware.” This tool was used to surgically analyze network structures, bypass defensive controls, and extract valuable data rapidly.