Ransomware
Incident feed
Newest first · derived from each report's own text| Time | Victim / report | Group | Country | Source |
|---|---|---|---|---|
| Report How To Stop Shadow AI Use In Companies The most effective way to prevent the growth of shadow AI in companies is to combine clear policies, employee… | — | — | BlackFog | |
| Victim listed Southwest Orthopedic & Reconstructive Specialists | Interlock | United States | RansomLook | |
| Report What Are The Biggest Shadow AI Compliance Risks? Shadow AI tools are used without organizational approval. As they spread into a wider shadow AI economy… | — | — | BlackFog | |
| Report What Are The Most Popular Shadow AI Tools And Platforms? The most popular shadow AI tools are general-purpose chatbots such as ChatGPT, Claude, Gemini and Perplexity… | — | — | BlackFog | |
| Report How To Log And Track Shadow AI Prompts Companywide To log and track shadow AI prompts companywide, organizations need one central record of every AI… | — | — | BlackFog | |
| Report Shadow AI Lifecycle Management: From Discovery To Control Shadow AI lifecycle management is a structured way to handle unapproved AI tools through five connected… | — | — | BlackFog | |
| Report How To Enforce Shadow AI Rules With Minimal Friction Enforcing shadow AI rules with minimal friction means targeting the risky action, which is sensitive data… | — | — | BlackFog | |
| Report What To Think About When Writing An Enterprise AI Usage Policy Setting formal rules is now essential for governing how AI is used inside the enterprise and for keeping the… | — | — | BlackFog | |
| Report Enterprise Endpoint Security In The Age Of Shadow AI Enterprise endpoint security solutions have long served as a key line of defense, protecting businesses from… | — | — | BlackFog | |
| Report BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware… | — | United States | Graham Cluley |
- Reports this week
- 280
- Victim posts this week
- 241
- Groups named this week
- 48
- Latest report
- 1 hour ago
Groups named this week
- Thegentlemen42
- N0n36
- SafePay19
- Akira16
- Medusalocker15
- Silent Ransom Group11
- Braincipher8
- Settra8
- Orova7
- Genesis6
- Aoqin5
- Rhysida5
Most named countries this week
- United States59
- Germany16
- United Kingdom9
- Indonesia5
- Switzerland5
- Belgium5
Live radars and open resources
Live victim trackers
- ransomware.live open sourceLeak-site monitor with victims by day, group profiles, a world map, statistics and a free JSON API.
- RansomLook open sourceWatches leak sites, Telegram channels and forums. Recent posts and per-group pages.
- ransomwatch open sourceLeak-site scraper with a public dashboard; the raw JSON lives on GitHub.
- Ransomfeed open sourceItalian community tracker of leak-site claims with charts per group and country.
- ecrime.chLeak-site tracker with daily counts and per-group victim listings.
- DarkfeedDark-web ransomware feed and group tracker with a public overview.
- The Record ransomware trackerMonthly figures on claimed attacks, compiled by Recorded Future's newsroom.
Groups, payments and data
- ransomware.live groups open sourceProfiles of active groups with their leak-site status and recent activity.
- Ransomwhere open dataCrowdsourced, open dataset of ransomware payments traced on the blockchain.
- DeepDarkCTI open sourceCurated list of ransomware gang sites, forums, markets and Telegram channels.
- ransomwatch on GitHub open sourceSource code and the machine-readable posts and groups data behind ransomwatch.
- ransomware.live API open sourceFree JSON endpoints for recent victims, groups, statistics and negotiations.
- ThreatFox open dataabuse.ch community IOC database: C2 servers, hashes and URLs tagged by family.
- MalwareBazaar open dataabuse.ch sample repository with ransomware family tags and YARA matches.
Identify, recover, report
- ID RansomwareUpload a ransom note or an encrypted file to identify the strain (MalwareHunterTeam).
- No More RansomFree decryptors and advice from Europol, national police and security vendors.
- Emsisoft decryptorsFree decryption tools for dozens of ransomware families.
- CISA #StopRansomwareJoint advisories on active groups, the StopRansomware guide and where to report.