Skip to content
Latest
Threat Intel
Vulnerabilities
Ransomware
Data Breaches
AI security
AI Indexer
Books
Search
Search
Latest
Threat Intel
Vulnerabilities
Ransomware
Data Breaches
AI security
AI Indexer
Books
Ransomware
Countries named in ransomware reports this week
United States: 53 reports · newest: Food Bank of Central Louisiana
Germany: 13 reports · newest: jhz-bernardshof.de
United Kingdom: 7 reports · newest: Unilever
Mexico: 6 reports · newest: Michigan State cyber incident claimed by ransomware gang behind recent hospital attack
Belgium: 5 reports · newest: titres-services.net
Taiwan: 4 reports · newest: Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Switzerland: 3 reports · newest: Juge, Napolitano, Ruli, Putfark & Pittman
Spain: 3 reports · newest: Not a game: Europol and partners target terrorist role-playing online
Turkey: 3 reports · newest: Ateşsan Ambalaj
Indonesia: 3 reports · newest: synergy.co.id
Italy: 3 reports · newest: Spontini
Australia: 2 reports · newest: prospecthillcamberwell.com.au
Malaysia: 2 reports · newest: MARDEC Berhad
Singapore: 2 reports · newest: Raffles United Holdings Pte Ltd
United Arab Emirates: 2 reports · newest: Unnamed victim listed by N0n
Sweden: 2 reports · newest: Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg
India: 2 reports · newest: hitech group
Canada: 2 reports · newest: Psychometrics Canada
Chile: 1 report · newest: Petroshahd(Enap Sipetrol International - Egypt Branch)
Finland: 1 report · newest: Investment scams with potential victims in at least 50 countries: over 100 servers seized
Saudi Arabia: 1 report · newest: Unnamed victim listed by N0n
Hong Kong: 1 report · newest: Detronics Pte Ltd
France: 1 report · newest: Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg
China: 1 report · newest: Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Access
Japan: 1 report · newest: jumonji-u.ac.jp
Argentina: 1 report · newest: everon.com.ar
Ireland: 1 report · newest: Jons Civil Engineering Company Ltd. (JCEL)
Denmark: 1 report · newest: Marie Kruses Skole
Norway: 1 report · newest: Serit CC
Netherlands: 1 report · newest: Five TEFAF robbery suspects added to EU Most Wanted
Israel: 1 report · newest: The Anglican International School
Austria: 1 report · newest: www.viehhauser-kfz.at
Incident feed
Newest first · derived from each report's own text
Time
Victim / report
Group
Country
Source
06 Oct
18:21
Victim listed
Greggio Argento
Deadlock
Italy
ransomware.live
06 Oct
18:17
Victim listed
Agri Industrial
Everest
—
ransomware.live
06 Oct
18:17
Victim listed
B-accountants
Everest
—
ransomware.live
06 Oct
18:16
Victim listed
Morcon Developments
Everest
—
ransomware.live
06 Oct
18:15
Victim listed
Kennametal
Everest
United States
ransomware.live
06 Oct
18:15
Victim listed
Flydubai
Everest
United Arab Emirates
ransomware.live
06 Oct
17:10
Report
SOCRadar Alarms in Elastic | Investigate Threats Faster
Investigate SOCRadar Alarms Where Your Analysts Already Work, with SOCRadar and Elastic Your SOC runs on…
—
—
SOCRadar
06 Oct
16:54
Victim listed
Four Hands LLC
Umbra
—
ransomware.live
06 Oct
16:52
Victim listed
Michael K Shelby, CPA
Akira
—
ransomware.live
06 Oct
16:52
Victim listed
Hygrade
Akira
—
ransomware.live
Reports this week
239
Victim posts this week
196
Groups named this week
47
Latest report
47 min ago
Groups named this week
N0n
22
SafePay
19
Thegentlemen
19
Akira
11
Silent Ransom Group
10
Booba Project
9
Rhysida
8
Settra
8
Braincipher
7
Orova
7
Genesis
6
Pear
5
Most named countries this week
United States
53
Germany
13
United Kingdom
7
Mexico
6
Belgium
5
Taiwan
4
Live radars and open resources
Live victim trackers
ransomware.live
open source
↗
Leak-site monitor with victims by day, group profiles, a world map, statistics and a free JSON API.
RansomLook
open source
↗
Watches leak sites, Telegram channels and forums; recent posts and per-group pages.
ransomwatch
open source
↗
Leak-site scraper with a public dashboard; the raw JSON lives on GitHub.
Ransomfeed
open source
↗
Italian community tracker of leak-site claims with charts per group and country.
ecrime.ch
↗
Leak-site tracker with daily counts and per-group victim listings.
Darkfeed
↗
Dark-web ransomware feed and group tracker with a public overview.
The Record ransomware tracker
↗
Monthly figures on claimed attacks, compiled by Recorded Future's newsroom.
Groups, payments and data
ransomware.live groups
open source
↗
Profiles of active groups with their leak-site status and recent activity.
Ransomwhere
open data
↗
Crowdsourced, open dataset of ransomware payments traced on the blockchain.
DeepDarkCTI
open source
↗
Curated list of ransomware gang sites, forums, markets and Telegram channels.
ransomwatch on GitHub
open source
↗
Source code and the machine-readable posts and groups data behind ransomwatch.
ransomware.live API
open source
↗
Free JSON endpoints for recent victims, groups, statistics and negotiations.
ThreatFox
open data
↗
abuse.ch community IOC database: C2 servers, hashes and URLs tagged by family.
MalwareBazaar
open data
↗
abuse.ch sample repository with ransomware family tags and YARA matches.
Identify, recover, report
ID Ransomware
↗
Upload a ransom note or an encrypted file to identify the strain (MalwareHunterTeam).
No More Ransom
↗
Free decryptors and advice from Europol, national police and security vendors.
Emsisoft decryptors
↗
Free decryption tools for dozens of ransomware families.
CISA #StopRansomware
↗
Joint advisories on active groups, the StopRansomware guide and where to report.
← Newer
1
…
105
106
107
108
109
…
113
Older →