MBSD Releases World's First Free Web App Dynamically Visualizing Over 400 Ransomware Groups

The Cyber Intelligence Group (CIG) of Mitsui Bussan Secure Direction, Inc. (Headquarters: Chuo-ku, Tokyo, President and CEO: Taizan Suzuki) announced today the launch of the "CIG Ransomware Information Portal" (hereinafter referred to as "this Web App"). This Web App is the world's first (*) web application that aggregates and visualizes threat information, such as the trends and correlations of ransomware groups. At the time of its release, it contains information on over 400 ransomware groups. No registration is required, and anyone can use it for free.

(*) As of April 9, 2026, according to our company's research.

Visualizing Relationships Between Ransomware Groups In recent years, ransomware attacks targeting domestic companies have continued to increase, causing a severe impact on the business continuity of victimized organizations. To counter these threats, it is essential to accurately understand the trends of ransomware groups and the connections behind them, in order to take swift and precise countermeasures.

The "Ransomware Map," previously provided by our company as a PDF document, has been highly evaluated by security experts globally as a comprehensive resource organizing the relationships and transitions between ransomware groups.

This time, to respond to rapidly changing threat landscapes and meet the need for quicker information updates and intuitive analysis, we have added a wealth of new information and developed and released it as an application operable on web browsers.

Screenshot (Timeline Layout)

Key Features of the CIG Ransomware Information Portal 1. Interactive Operability Using a web browser, it enables intuitive operation of the Ransomware Map. This allows users to arbitrarily place ransomware groups of interest and easily understand their relationships with other groups.

2. Flexible Analysis Layouts Tailored to Objectives In addition to the "Timeline" layout provided in the traditional Ransomware Map, we offer three types of layouts: a "Links" layout that groups related ransomware groups together, and a "Custom" layout where users can freely arrange attack groups. This allows for organization and analysis suited to the user's objectives.

3. Reflects the Latest Threat Intelligence The information on the included ransomware groups will be added and updated as needed. Through the interactive analysis functions, users can integrally grasp the latest information on ransomware groups within this Web App.

4. Equipped with a Database of Ransomware Group Overviews and Ransom Notes As a new approach this time, we have created a database containing overview texts and ransom notes for each ransomware group, integrating it into the CIG Ransomware Information Portal. As a result, users can not only grasp the overview of each ransomware group but also search ransom notes using any keyword, allowing the portal to be utilized as a practical analysis support tool for understanding threat trends.

Operating Environment This Web App is designed for use on a personal computer