Symantec-Ransomware-Threat-Landscape-2026.md

**Executive summary:** Ransomware 2026 is a Symantec/Carbon Black white paper reviewing the 2025 ransomware landscape, documenting a rise in encryptionless extortion and large-scale data theft, profiling major ransomware families and threat actors (Akira, Qilin, DragonForce, RansomHub/Greenbottle, LockBit/Syrphid, Warlock, etc.), detailing exploited vulnerabilities and zero-days (with CVE references), common TTPs (BYOVD, living-off-the-land, remote access tools, credential theft, data exfiltration), and providing detection and mitigation guidance based on Symantec and Carbon Black capabilities.