--- title: Q&A: Ransomware is now a ‘fully fledged industry’, says... description: Cybercrime journalist Geoff White explains how ransomware has evolved into a mature, fully fledged industry with at least 62 active groups on the dark web... canonical: https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Q&A: Ransomware is now a ‘fully fledged industry’, says cybercrime journalist Geoff White | daily.dev og:description: Cybercrime journalist Geoff White explains how ransomware has evolved into a mature, fully fledged industry with at least 62 active groups on the dark web... og:url: https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g og:image: https://api.daily.dev/og/posts/cxKbuDV3G.png og:image:alt: Q&A: Ransomware is now a ‘fully fledged industry’, says cybercrime journalist Geoff White og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Q&A: Ransomware is now a ‘fully fledged industry’, says cybercrime journalist Geoff White **[IT Security Guru](https://daily.dev/sources/itsecurityguru)** · 6 min read · 0 upvotes · 0 comments ## Summary Cybercrime journalist Geoff White explains how ransomware has evolved into a mature, fully fledged industry with at least 62 active groups on the dark web operating strategically across sectors. He argues network segmentation is the most critical defence once attackers are inside an organisation. On AI, White notes cybercriminals currently use it for mundane tasks like improving phishing emails and auditing code, while defenders are already deploying AI at scale — giving the defence side a current edge. He also highlights why stolen data has become the most versatile criminal asset, usable for fraud, ransom, resale, or political weaponisation. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How many ransomware groups are currently active on the dark web? At least 62 distinct ransomware groups have been identified operating on the dark web. These groups operate strategically, selecting target sectors — such as transport or pharmaceuticals — systematically identifying the most vulnerable and valuable organisations within them before launching attacks. _Security teams tracking the ransomware threat landscape find coverage like this on daily.dev._ ### What is the most effective defence against ransomware once attackers are inside your network? Network segmentation is the most effective defence once attackers breach a perimeter. By isolating departments and systems so that access to one area does not grant access to others, organisations limit the blast radius of an intrusion. The assumption should be that a ransomware gang will eventually get inside, making containment through segmentation the priority. _Teams hardening their networks against ransomware track practical guidance like this on daily.dev._ ### How are cybercriminals actually using AI right now compared to cyber defenders? Cybercriminals are using AI for the same tasks as legitimate users: improving phishing emails, auditing their own code, and conducting reconnaissance on targets. Defenders, by contrast, are deploying AI at scale — what was previously called machine learning — across security tooling. The defensive side currently holds the advantage, though that gap could narrow if attackers begin using AI at scale. _Developers and security engineers keeping pace with AI's role in attack and defence follow threads like this on daily.dev._ ## Similar posts on daily.dev - [AI and RaaS Alter Threat Landscape, New Ransomware Groups Grow by 30%](https://daily.dev/posts/ai-and-raas-alter-threat-landscape-new-ransomware-groups-grow-by-30--pzoklxcld) · Security Boulevard · 0 upvotes · 0 comments - [Cybercrime Inc.: When hackers are better organized than IT](https://daily.dev/posts/cybercrime-inc-when-hackers-are-better-organized-than-it-bwvfanzec) · CSO Online · 0 upvotes · 0 comments - [The Professionalised World of Cybercrime and the New Arms Race](https://daily.dev/posts/the-professionalised-world-of-cybercrime-and-the-new-arms-race-vnjptbvkm) · Security Boulevard · 0 upvotes · 0 comments - [Ransomware attacks spike as world distracted by AI](https://daily.dev/posts/ransomware-attacks-spike-as-world-distracted-by-ai-o4sfenrke) · The Register · 0 upvotes · 0 comments - [AI tools becoming hot commodities on ransomware marketplaces](https://daily.dev/posts/ai-tools-becoming-hot-commodities-on-ransomware-marketplaces-1fglfuwn6) · CSO Online · 0 upvotes · 0 comments --- Tags: [#ai](https://daily.dev/tags/ai), [#cyber](https://daily.dev/tags/cyber), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Q&A: Ransomware is now a ‘fully fledged industry’, says cybercrime journalist Geoff White","url":"https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g"},"datePublished":"2026-08-11T17:22:35.165Z","dateModified":"2026-08-11T17:23:03.530Z","description":"Cybercrime journalist Geoff White explains how ransomware has evolved into a mature, fully fledged industry with at least 62 active groups on the dark web...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0fbc20bdabeda44f31d78f3b22163473?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0fbc20bdabeda44f31d78f3b22163473?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"IT Security Guru","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"IT Security Guru","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/ae9fe7d07c814192b35f86ad698fb374","url":"https://daily.dev/sources/itsecurityguru"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,cyber,ransomware","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"IT Security Guru","item":"https://daily.dev/sources/itsecurityguru"},{"@type":"ListItem","position":3,"name":"Q&A: Ransomware is now a ‘fully fledged industry’, says cybercrime journalist Geoff White"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/q-a-ransomware-is-now-a-fully-fledged-industry-says-cybercrime-journalist-geoff-white-cxkbudv3g#faq","mainEntity":[{"@type":"Question","name":"How many ransomware groups are currently active on the dark web?","acceptedAnswer":{"@type":"Answer","text":"At least 62 distinct ransomware groups have been identified operating on the dark web. These groups operate strategically, selecting target sectors — such as transport or pharmaceuticals — systematically identifying the most vulnerable and valuable organisations within them before launching attacks. Security teams tracking the ransomware threat landscape find coverage like this on daily.dev."}},{"@type":"Question","name":"What is the most effective defence against ransomware once attackers are inside your network?","acceptedAnswer":{"@type":"Answer","text":"Network segmentation is the most effective defence once attackers breach a perimeter. By isolating departments and systems so that access to one area does not grant access to others, organisations limit the blast radius of an intrusion. The assumption should be that a ransomware gang will eventually get inside, making containment through segmentation the priority. Teams hardening their networks against ransomware track practical guidance like this on daily.dev."}},{"@type":"Question","name":"How are cybercriminals actually using AI right now compared to cyber defenders?","acceptedAnswer":{"@type":"Answer","text":"Cybercriminals are using AI for the same tasks as legitimate users: improving phishing emails, auditing their own code, and conducting reconnaissance on targets. Defenders, by contrast, are deploying AI at scale — what was previously called machine learning — across security tooling. The defensive side currently holds the advantage, though that gap could narrow if attackers begin using AI at scale. Developers and security engineers keeping pace with AI's role in attack and defence follow threads like this on daily.dev."}}]} ```