Report · from Zscaler
Zscaler ThreatLabz 2025 Ransomware Report
Weaponized GenAI, faster execution, and extortion-first strategies are fueling a new age of ransomware. The impact: a 146% increase in ransomware attacks blocked by Zscaler and a 70% rise in public extortion.

- Format
- Report
- Published by
- Zscaler
- Category
- Cybersecurity & Compliance
- Added
- 29 Dec 2025
About this report
Ransomware attacks surge 146% year over year
Weaponized GenAI, faster execution, and extortion-first strategies are fueling a new age of ransomware. The impact: a 146% increase in ransomware attacks blocked by Zscaler and a 70% rise in public extortion.
Ransomware reaches new levels of impact and reinvention
Explore the latest ransomware trends and insights from Zscaler ThreatLabz, based on expert analysis of public leak sites, ransomware samples and attack data, and telemetry from the world’s largest cloud security platform.
In this report, you’ll learn the latest about:
- Top ransomware trends, targets, and tactics worldwide
- 5 ransomware families to watch out for in 2025–2026
- Predictions on what's next for the future of ransomware
- How ThreatLabz disrupts operations and helps victims recover
- Zero trust strategies and best practices to reduce ransomware risk
Listen or skim
Summaries are generated from this page’s text. Read the full piece for the detail.
More from Zscaler
All 3 →
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders
Your VPN is Helping Attackers Move as Fast as AI

Zscaler ThreatLabz 2026 AI Security Report
In 2025, enterprises generated nearly one trillion AI/ML transactions across the Zscaler cloud—expanding the enterprise attack surface and making scalable AI security a practical necessity.
Elsewhere in Cybersecurity & Compliance
See the category →
Simplifying security in the age of complexity
In an effort to achieve “digital transformation,” businesses have found that technology investments have actually outpaced their ability to see and secure everything.

Threat Vector Investigates
To stop sophisticated attacks, you need to know what you’re up against. Turn adversary insight into informed threat defense.

Secure work on all of devices, managed or not.
The average employee spends over 85% of their day working in a browser. But the lack of visibility and control over users' actions within corporate applications is leaving sensitive data vulnerable to threats. That's
