Ransomware
0Apt is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
0Mega is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Emerging ransomware variant targeting enterprise environments
Ransomware
8Base is a prolific double extortion group active since 2022 with a Tor-based leak site. This profile covers the group's operations, tactics, known campaigns, a
Ransomware
Abrahams Ax is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Abyss is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Adminlocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Againstthewest is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics,
Ransomware
Agl0Bgvycg is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Ailock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Executive briefing on Akira ransomware, a Conti syndicate successor responsible for over $42 million in damages across 250+ organizations in its first year.
Ransomware
Ako is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known campa
Ransomware
Alphalocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Alphv is a also known as BlackCat, first Rust-based RaaS, FBI seized infrastructure in Dec 2023. This profile covers the group's operations, tactics, known camp
Ransomware
Anubis is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Apos is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Apt73 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Arcusmedia is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Argonauts is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Arkana is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Arvinclub is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Atomsilo is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Avaddon is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Avos is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Avoslocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Aware is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Aztroteam is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Babuk is a leaked source code spawned dozens of variants, targeted DC Metropolitan Police. This profile covers the group's operations, tactics, known campaigns,
Ransomware
Babuk2 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Babyduck is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Beast is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Benzona is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Go-based ransomware turned data extortion group
Ransomware
Black Basta is a emerged from Conti dissolution, over 500 victims worldwide since Apr 2022. This profile covers the group's operations, tactics, known campaigns
Ransomware
Ransomware group exploiting Exchange/ESXi vulnerabilities
Ransomware
BlackCat is a also known as ALPHV, Rust-based RaaS with triple extortion, FBI disrupted Dec 2023. This profile covers the group's operations, tactics, known cam
Ransomware
Blacklock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Blackmatter is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Blacknevas is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Blackout is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Blackshadow is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Blackshrantac is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
BlackSuit ransomware group analysis — a rebranded Royal ransomware from the Conti gang targeting healthcare, education, and critical infrastructure.
Ransomware
Blacktor is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Bluebox is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Bluelocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Bluesky is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Bonacigroup is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Bqtlock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Braincipher is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Bravox is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Brotherhood is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Cactus is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Cephalus is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Cheers is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Chilelocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Chort is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Cicada3301 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Ciphbit is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Cipherforce is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Cl0p is a exploited MOVEit, GoAnywhere, Accellion for mass data theft affecting 2,500+ orgs. This profile covers the group's operations, tactics, known campaign
Ransomware
Cloak is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Coinbasecartel is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics,
Ransomware
Contfr is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Conti is a Russian-linked RaaS generating $180M+ before dissolution in 2022, leaked internal chats. This profile covers the group's operations, tactics, known c
Ransomware
Cooming is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Crazyhunter is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Crosslock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Cry0 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Crylock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Cryp70N1C0D3 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Cryptbb is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Cryptnet is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Crypto24 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Cuba is a exploited Veeam and Microsoft Exchange, linked to COLDDRAW threat actor. This profile covers the group's operations, tactics, known campaigns, and def
Ransomware
Cyclops is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
D4Rk4Rmy is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Dagonlocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Daixin is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Dan0N is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Darkangels is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Darkbit is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Darkleakmarket is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics,
Ransomware
Darkpower is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Darkrace is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Darkside is a responsible for Colonial Pipeline attack, caused US fuel supply disruption. This profile covers the group's operations, tactics, known campaigns,
Ransomware
Darkvault is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Datacarry is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Datakeeper is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Dataleak is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Desolator is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Devman is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Diavol is a linked to Wizard Spider/TrickBot operators. This profile covers the group's operations, tactics, known campaigns, and defensive recommendations.
Ransomware
Direwolf is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Dispossessor is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Donex is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Donutleaks is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Doppelpaymer is a evolved from BitPaymer, targeted critical infrastructure. This profile covers the group's operations, tactics, known campaigns, and defensive
Ransomware
Dragonforce is a Malaysian hacktivist-turned-ransomware group. This profile covers the group's operations, tactics, known campaigns, and defensive recommendatio
Ransomware
Dragonransomware is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics
Ransomware
Dread is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Dunghill is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ech0Raix is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Eldorado is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Embargo is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Entropy is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Ep918 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Everest is a data extortion group that also sells initial access. This profile covers the group's operations, tactics, known campaigns, and defensive recommenda
Ransomware
Exorcist is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Fletchen is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Flocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Fog is a targets education and recreation sectors via compromised VPN credentials. This profile covers the group's operations, tactics, known campaigns, and def
Ransomware
Frag is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Freecivilian is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Fsteam is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Funksec is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Gdlockersec is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Genesis is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Grief is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Groove is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Gunra is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Hades is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Handala is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Haron is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Hellcat is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Helldown is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Hellogookie is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Hellokitty is a cross-platform ransomware that targeted CD Projekt Red and others. This profile covers the group's operations, tactics, known campaigns, and def
Ransomware
Ransomware-as-a-Service disrupted by FBI infiltration
Ransomware
Holyghost is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Hotarus is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Hunters is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Icefire is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Imncrew is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Insane is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Insomnia is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ransomware targeting FreeBSD and critical infrastructure
Ransomware
Kairos is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Karakurt is a data extortion without encryption, linked to Conti. This profile covers the group's operations, tactics, known campaigns, and defensive recommenda
Ransomware
Karma is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Kawa4096 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Kazu is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Kelvinsecurity is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics,
Ransomware
Killsec is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Kittykatkrew is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Knight is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Kraken is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Kryptos is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Kyber is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
La Piovra is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Lapsus$ is a teenage extortion group that breached Microsoft, Nvidia, Samsung, Uber. This profile covers the group's operations, tactics, known campaigns, and d
Ransomware
Leaktheanalyst is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics,
Ransomware
Lilith is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Linkc is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Most prolific RaaS operation before Operation Cronos
Ransomware
Lockdata is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Lolnek is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Lorenz is a exploits Mitel VoIP vulnerabilities for initial access. This profile covers the group's operations, tactics, known campaigns, and defensive recommen
Ransomware
Losttrust is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Lunalock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Madcat is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Madliberator is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Malas is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Malekteam is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Mallox is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Emerging ransomware targeting Latin American organizations
Ransomware
Marketo is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Maze is a pioneered double extortion model in 2019. This profile covers the group's operations, tactics, known campaigns, and defensive recommendations.
Ransomware
Persistent RaaS targeting healthcare and education
Ransomware
Meow is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Metaencryptor is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
Midas is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Mindware is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Minteye is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Mogilevich is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Moneymessage is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Monti is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Morpheus is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Mountlocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Ms13089 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Mydecryptor is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
N3Tworm is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Nasirsecurity is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
Nefilim is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Nemty is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Netwalker is a RaaS disrupted by FBI in Jan 2021, operator sentenced. This profile covers the group's operations, tactics, known campaigns, and defensive recomm
Ransomware
Nevada is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Nightsky is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Nightspire is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Nitrogen is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Noescape is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Nokoyawa is a exploited Windows CLFS zero-day CVE-2023-28252. This profile covers the group's operations, tactics, known campaigns, and defensive recommendation
Ransomware
Noname is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Nova is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Obscura is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Onepercent is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
TOR-based ransomware
Ransomware
Orion is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Osiris is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Pandora is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Pay2Key is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Payload is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Payloadbin is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Payoutsking is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Pear is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Projectrelic is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Prolock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Prometheus is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Promptlock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Pysa is a also known as Mespinoza, targets education and healthcare. This profile covers the group's operations, tactics, known campaigns, and defensive recomme
Deep dive into Qilin ransomware — a Russian-origin RaaS operation targeting healthcare, manufacturing, and critical infrastructure with double extortion.
Ransomware
Qiulong is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Qlocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Quantum is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Rabbithole is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Radar is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Radiant is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Ragnarlocker is a law enforcement seized infrastructure Oct 2023. This profile covers the group's operations, tactics, known campaigns, and defensive recommenda
Ransomware
Ragnarok is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ralord is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Ramp is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Rancoz is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Ranion is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Ransombay is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ransomcartel is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Ransomcortex is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Ransomed is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ransomexx is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ransomhouse is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Ranstreet is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ranzy is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Raworld is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Raznatovic is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Rebornvc is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Redalert is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Redransomware is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
Revil is a also known as Sodinokibi, attacked Kaseya and JBS, multiple arrests. This profile covers the group's operations, tactics, known campaigns, and defens
Ransomware
Reynolds is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Ransomware group targeting healthcare and government
Ransomware
Robinhood is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Rook is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Royal is a evolved into BlackSuit, linked to former Conti members. This profile covers the group's operations, tactics, known campaigns, and defensive recommend
Ransomware
Runsomewares is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Big game hunting ransomware from Wizard Spider
Ransomware
Sabbath is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Safepay is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Sarcoma is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Satanlockv2 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Secp0 is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Securotrop is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Sensayq is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Shadow is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Shadowbyt3$ is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Shaoleaks is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Shinyhunters is a data breach and extortion group that hit AT&T, Ticketmaster via Snowflake. This profile covers the group's operations, tactics, known campaign
Ransomware
Shinysp1D3R is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Sicarii is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Siegedsec is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Silentransomgroup is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactic
Ransomware
Sinobi is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Slug is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Ransomware using Safe Mode reboot to evade detection
Ransomware
Solidbit is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Spacebears is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Sparta is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Spook is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Stormous is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Sugar is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Suncrypt is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Synack is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Teamxxx is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Tengu is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Termite is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Threat analysis of RansomHub — from ALPHV's exit scam to the most prolific RaaS operation of 2024, and its hostile takeover by DragonForce.
Ransomware
Thegentlemen is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kn
Ransomware
Thegreenbloodgroup is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tacti
Ransomware
Threeam is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Toufan is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Tridentlocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
Trigona is a exploited MSSQL servers for initial access. This profile covers the group's operations, tactics, known campaigns, and defensive recommendations.
Ransomware
Trinity is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Trisec is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
U-Bomb is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Underground is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, kno
Ransomware
Unknown is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Unsafe is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Valencialeaks is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
Vanhelsing is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Vanirgroup is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Vect is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Vendetta is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Vfokx is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Vicesociety is a heavily targeted education sector. This profile covers the group's operations, tactics, known campaigns, and defensive recommendations.
Ransomware
Walocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known
Ransomware
Wannacry is a North Korean-linked worm that infected 230,000+ systems in 150 countries in 2017. This profile covers the group's operations, tactics, known campa
Ransomware
Warlock is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known c
Ransomware
Werewolves is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Weyhro is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Worldleaks is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
X001Xs is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known ca
Ransomware
Xinglocker is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, know
Ransomware
Xinof is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Yanluowang is a targeted Cisco in 2022, member data later leaked. This profile covers the group's operations, tactics, known campaigns, and defensive recommenda
Ransomware
Yurei is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known cam
Ransomware
Zeon is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, known camp
Ransomware
Zerolockersec is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k
Ransomware
Zerotolerance is a ransomware/extortion group operating a dark web leak site for victim data publication. This profile covers the group's operations, tactics, k