Ransomware is one of the most prolific and economically damaging cybercrime threats of the contemporary era. This paper examines the evolution and activities of ransomware criminal groups. Results reveal the most active ransomware criminal groups, the median range of their careers and the most targeted victim organisations by country and sector type.