Monti represents a relatively new form of ransomware that targets Linux systems, encrypting their files and appending a ".puuuk" extension to them. There have been indications of potential Monti variations that are effective on Windows systems as well.

The Rhysida ransomware-as-a-service (RaaS) group has swiftly transformed from an unknown entity to a well-established ransomware operation.

In late 2022, a ransomware family known as CatB (also called CatB99 or Baxtoy) was first detected. Since November, there have been consistent reports of their attacks, which involve using DLL hijacking via Microsoft Distributed Transaction Coordinator (MSDTC)

In December 2022, criminal forums advertised Nevada ransomware as part of a new ransomware-as-a-service affiliate program. Nevada is programmed in Rust and is compatible with Linux and 64-bit Windows

HardBit has been targeting organizations by encrypting their data and demanding cryptocurrency payments for decryption. In late November 2022, an updated version of HardBit, version 2.0, was released and has been observed in use through the end of 2022 and into 2023.