Skip to content
Latest
Threat Intel
Vulnerabilities
Ransomware
Data Breaches
AI security
AI Indexer
Books
Search
Search
Latest
Threat Intel
Vulnerabilities
Ransomware
Data Breaches
AI security
AI Indexer
Books
Ransomware
Countries named in ransomware reports this week
United States: 61 reports · newest: Boyle, Pecharich, Cline, Whittington andStallings
Germany: 16 reports · newest: Qilin Ransomware Admin Haise Allegedly Unmasked
United Kingdom: 10 reports · newest: AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground
Indonesia: 5 reports · newest: Unnamed victim listed by N0n
Switzerland: 5 reports · newest: Labatec
Belgium: 5 reports · newest: titres-services.net
Japan: 4 reports · newest: Qilin Ransomware Admin Haise Allegedly Unmasked
Canada: 4 reports · newest: Unnamed victim listed by N0n
Brazil: 4 reports · newest: Solutis Tecnologias
Italy: 3 reports · newest: Unnamed victim listed by Pixelleaks
Spain: 3 reports · newest: Grupo Lorrio
Taiwan: 3 reports · newest: Synology warns of C3RB3R ransomware attacks targeting NAS devices
Turkey: 3 reports · newest: Ateşsan Ambalaj
Mexico: 3 reports · newest: uaa.mx
Saudi Arabia: 2 reports · newest: Centrepoint
Denmark: 2 reports · newest: Unnamed victim listed by N0n
France: 2 reports · newest: Logsytech Group
South Africa: 2 reports · newest: MegChem
Australia: 2 reports · newest: prospecthillcamberwell.com.au
Malaysia: 2 reports · newest: MARDEC Berhad
Singapore: 2 reports · newest: Raffles United Holdings Pte Ltd
Sweden: 2 reports · newest: Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg
Vietnam: 1 report · newest: ZipAI
Romania: 1 report · newest: System Plus
New Zealand: 1 report · newest: Lighting Direct
Ukraine: 1 report · newest: Mitsubishi Motors Ukraine
Morocco: 1 report · newest: Kde
Chile: 1 report · newest: Petroshahd(Enap Sipetrol International - Egypt Branch)
Finland: 1 report · newest: Investment scams with potential victims in at least 50 countries: over 100 servers seized
Hong Kong: 1 report · newest: Detronics Pte Ltd
United Arab Emirates: 1 report · newest: Unnamed victim listed by N0n
China: 1 report · newest: Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Access
India: 1 report · newest: hitech group
Argentina: 1 report · newest: everon.com.ar
Ireland: 1 report · newest: Jons Civil Engineering Company Ltd. (JCEL)
Norway: 1 report · newest: Serit CC
Incident feed
Newest first · derived from each report's own text
Time
Victim / report
Group
Country
Source
31 Oct
15:30
Victim listed
Kraft Lernen
Payload
Germany
ransomware.live
31 Oct
15:28
Victim listed
SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH)
Payload
Germany
ransomware.live
31 Oct
13:35
Victim listed
Phoenix Charter Academy
Rhysida
United States
ransomware.live
31 Oct
11:31
Victim listed
Ivan Smith Furniture
Sarcoma
United States
ransomware.live
31 Oct
11:30
Victim listed
Gamdom V2
Whitearmor
—
ransomware.live
31 Oct
10:53
Victim listed
Holcim
Emperador
Switzerland
ransomware.live
31 Oct
09:04
Victim listed
quevedo-ponce.com
SafePay
—
ransomware.live
31 Oct
09:03
Victim listed
mars-semi.com.tw
SafePay
Taiwan
ransomware.live
31 Oct
09:02
Victim listed
Rood Trucking
SafePay
—
ransomware.live
31 Oct
09:02
Victim listed
grifosespinoza.com
SafePay
—
ransomware.live
Reports this week
284
Victim posts this week
244
Groups named this week
48
Latest report
30 min ago
Groups named this week
Thegentlemen
42
N0n
36
SafePay
19
Akira
17
Medusalocker
15
Silent Ransom Group
11
Braincipher
8
Settra
8
Orova
7
Genesis
6
Aoqin
5
Rhysida
5
Most named countries this week
United States
61
Germany
16
United Kingdom
10
Indonesia
5
Switzerland
5
Belgium
5
Live radars and open resources
Live victim trackers
ransomware.live
open source
↗
Leak-site monitor with victims by day, group profiles, a world map, statistics and a free JSON API.
RansomLook
open source
↗
Watches leak sites, Telegram channels and forums. Recent posts and per-group pages.
ransomwatch
open source
↗
Leak-site scraper with a public dashboard; the raw JSON lives on GitHub.
Ransomfeed
open source
↗
Italian community tracker of leak-site claims with charts per group and country.
ecrime.ch
↗
Leak-site tracker with daily counts and per-group victim listings.
Darkfeed
↗
Dark-web ransomware feed and group tracker with a public overview.
The Record ransomware tracker
↗
Monthly figures on claimed attacks, compiled by Recorded Future's newsroom.
Groups, payments and data
ransomware.live groups
open source
↗
Profiles of active groups with their leak-site status and recent activity.
Ransomwhere
open data
↗
Crowdsourced, open dataset of ransomware payments traced on the blockchain.
DeepDarkCTI
open source
↗
Curated list of ransomware gang sites, forums, markets and Telegram channels.
ransomwatch on GitHub
open source
↗
Source code and the machine-readable posts and groups data behind ransomwatch.
ransomware.live API
open source
↗
Free JSON endpoints for recent victims, groups, statistics and negotiations.
ThreatFox
open data
↗
abuse.ch community IOC database: C2 servers, hashes and URLs tagged by family.
MalwareBazaar
open data
↗
abuse.ch sample repository with ransomware family tags and YARA matches.
Identify, recover, report
ID Ransomware
↗
Upload a ransom note or an encrypted file to identify the strain (MalwareHunterTeam).
No More Ransom
↗
Free decryptors and advice from Europol, national police and security vendors.
Emsisoft decryptors
↗
Free decryption tools for dozens of ransomware families.
CISA #StopRansomware
↗
Joint advisories on active groups, the StopRansomware guide and where to report.
← Newer
1
…
21
22
23
24
25
…
114
Older →