---
title: "Threat Intel Content Update: 3/11/25"
description: Tidal Cyber's threat intelligence content updates for the week of 3/11/25- Major & Emerging Ransomware, Tidal Cyber Trending Techniques, and Sector TPs
---

[Threat Intelligence Content Updates ](https://www.tidalcyber.com/threat-updates)

# [Threat Intel Content Update: 3/11/25](https://www.tidalcyber.com/threat-updates/threat-intel-content-updated-3/11/25)

 Written by [Tidal Cyber](https://www.tidalcyber.com/threat-updates/author/tidal-cyber) | Mar 11, 2025 2:49:42 PM

#### **Major & Emerging Ransomware, Tidal Cyber Trending Techniques, and Sector TPs**

****Threat Content Highlights****

Threat Profiles & Objects

- Monthly updates to Tidal Cyber-curated Threat Profiles: **Major & Emerging Ransomware**, **Tidal Trending Techniques**, and **Sector TPs**: 
    - For the first time in several months, no recently identified ransomware groups appeared in the top ten for claimed attacks in February. But this doesn’t mean the landscape is static. Our monthly ransomware Threat Profile dynamically adds & removes the top groups for the previous month, and adjusts their weightings according to each one’s monthly tally of claimed attacks.
    - Individual groups continue to evolve too – for example, see the separate **Clop Extortion Ecosystem **TP, which features a [Campaign object](https://app.tidalcyber.com/campaigns/2c957f94-8b61-49b9-b914-74a06f8b91cd?tab=2) reflecting this gang’s most recently observed TTPs (and not the Clop Software object, which derives from older reporting).
    - February saw the largest monthly tally of claimed attacks in 3+ years of ransomware attack data. This number was fueled in part by groups that researchers assert often recycle data from previous attacks, like Clop and [RansomHub](https://app.tidalcyber.com/groups/94794e7b-8b54-4be8-885a-fd1009425ed5?tab=2). Teams should consider their assessments of particular groups’ threat/impact levels when choosing which threats to include in their Threat Profiles (and how to weight them).

 

[View full post](https://www.tidalcyber.com/threat-updates/threat-intel-content-updated-3/11/25)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Tidal Cyber"
  },
  "dateModified" : "2025-03-11T14:49:42.341Z",
  "datePublished" : "2025-03-11T14:49:42Z",
  "headline" : "Threat Intel Content Update: 3/11/25",
  "image" : {
    "@type" : "ImageObject",
    "height" : 500,
    "url" : "https://21164103.fs1.hubspotusercontent-na1.net/hubfs/21164103/Threat%20Intelligence%20Content%20Update%20Social.jpg",
    "width" : 900
  },
  "mainEntityOfPage" : "https://www.tidalcyber.com/threat-updates/threat-intel-content-updated-3/11/25",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Threat Intelligence Content Updates"
  }
}
```