RagnarLocker
RagnarLocker is a ransomware group with a financial motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 13 countries, including the United States and the United Kingdom. It uses 2 MITRE ATT&CK techniques and exploits 6 known CVEs.
- VIKING SPIDER
- Techniques
- 2
- Exploited CVEs
- 6
- First seen
- Dec 1, 2019
- Last seen
- Oct 20, 2023
- Record updated
Who They Target.
About RagnarLocker.
Ragnar Locker was an elite ransomware group active from December 2019 to October 2023 that targeted large enterprises and critical infrastructure, including Capcom and Campari, claiming at least 168 victims before being taken down by a Europol-led international law enforcement operation in October 2023.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.