Skip to content
Latest
Threat Intel
Vulnerabilities
Ransomware
Data Breaches
AI security
AI Indexer
Books
Search
Search
Latest
Threat Intel
Vulnerabilities
Ransomware
Data Breaches
AI security
AI Indexer
Books
Ransomware
Countries named in ransomware reports this week
United States: 59 reports · newest: Boyle, Pecharich, Cline, Whittington andStallings
Germany: 16 reports · newest: Qilin Ransomware Admin Haise Allegedly Unmasked
United Kingdom: 9 reports · newest: AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground
Indonesia: 5 reports · newest: Unnamed victim listed by N0n
Switzerland: 5 reports · newest: Labatec
Belgium: 5 reports · newest: titres-services.net
Japan: 4 reports · newest: Qilin Ransomware Admin Haise Allegedly Unmasked
Canada: 4 reports · newest: Unnamed victim listed by N0n
Brazil: 4 reports · newest: Solutis Tecnologias
Italy: 3 reports · newest: Unnamed victim listed by Pixelleaks
Spain: 3 reports · newest: Grupo Lorrio
Taiwan: 3 reports · newest: Synology warns of C3RB3R ransomware attacks targeting NAS devices
Turkey: 3 reports · newest: Ateşsan Ambalaj
Mexico: 3 reports · newest: uaa.mx
India: 2 reports · newest: Algonomy
Saudi Arabia: 2 reports · newest: Centrepoint
Denmark: 2 reports · newest: Unnamed victim listed by N0n
France: 2 reports · newest: Logsytech Group
South Africa: 2 reports · newest: MegChem
Australia: 2 reports · newest: prospecthillcamberwell.com.au
Malaysia: 2 reports · newest: MARDEC Berhad
Singapore: 2 reports · newest: Raffles United Holdings Pte Ltd
Sweden: 2 reports · newest: Supermarket Freezer Attacks Reach Belgium, Sweden, Luxembourg
Vietnam: 1 report · newest: ZipAI
Romania: 1 report · newest: System Plus
New Zealand: 1 report · newest: Lighting Direct
Ukraine: 1 report · newest: Mitsubishi Motors Ukraine
Morocco: 1 report · newest: Kde
Chile: 1 report · newest: Petroshahd(Enap Sipetrol International - Egypt Branch)
Finland: 1 report · newest: Investment scams with potential victims in at least 50 countries: over 100 servers seized
Hong Kong: 1 report · newest: Detronics Pte Ltd
United Arab Emirates: 1 report · newest: Unnamed victim listed by N0n
China: 1 report · newest: Pataya Food Leak, Belgian Military Data, China Housing Fund, Anka DDoS, and Vijay Sales Access
Argentina: 1 report · newest: everon.com.ar
Ireland: 1 report · newest: Jons Civil Engineering Company Ltd. (JCEL)
Norway: 1 report · newest: Serit CC
Incident feed
Newest first · derived from each report's own text
Time
Victim / report
Group
Country
Source
16 Oct
11:36
Victim listed
Thai Ha PCL KASET
Thegentlemen
Thailand
ransomware.live
16 Oct
11:36
Victim listed
Inovar Packaging Group
Thegentlemen
—
ransomware.live
16 Oct
11:35
Victim listed
Engineers Ireland
Thegentlemen
Ireland
ransomware.live
16 Oct
11:35
Victim listed
North Bridge Venture Partners
Thegentlemen
—
ransomware.live
16 Oct
11:34
Victim listed
SONGWOOI
Thegentlemen
South Korea
ransomware.live
16 Oct
11:34
Victim listed
Petroleum Telcom Communications
Thegentlemen
United States
ransomware.live
16 Oct
11:34
Victim listed
Axle Logistics
Thegentlemen
United States
ransomware.live
16 Oct
11:34
Victim listed
Cradlewise Inc.
The Seven Deadly Sins
—
ransomware.live
16 Oct
11:33
Victim listed
CAS Paper Mill
Thegentlemen
Thailand
ransomware.live
16 Oct
11:33
Victim listed
Globeia Inc.
The Seven Deadly Sins
Canada
ransomware.live
Reports this week
278
Victim posts this week
239
Groups named this week
48
Latest report
2 hours ago
Groups named this week
Thegentlemen
42
N0n
36
SafePay
19
Medusalocker
15
Akira
14
Silent Ransom Group
11
Braincipher
8
Settra
8
Orova
7
Genesis
6
Aoqin
5
Rhysida
5
Most named countries this week
United States
59
Germany
16
United Kingdom
9
Indonesia
5
Switzerland
5
Belgium
5
Live radars and open resources
Live victim trackers
ransomware.live
open source
↗
Leak-site monitor with victims by day, group profiles, a world map, statistics and a free JSON API.
RansomLook
open source
↗
Watches leak sites, Telegram channels and forums. Recent posts and per-group pages.
ransomwatch
open source
↗
Leak-site scraper with a public dashboard; the raw JSON lives on GitHub.
Ransomfeed
open source
↗
Italian community tracker of leak-site claims with charts per group and country.
ecrime.ch
↗
Leak-site tracker with daily counts and per-group victim listings.
Darkfeed
↗
Dark-web ransomware feed and group tracker with a public overview.
The Record ransomware tracker
↗
Monthly figures on claimed attacks, compiled by Recorded Future's newsroom.
Groups, payments and data
ransomware.live groups
open source
↗
Profiles of active groups with their leak-site status and recent activity.
Ransomwhere
open data
↗
Crowdsourced, open dataset of ransomware payments traced on the blockchain.
DeepDarkCTI
open source
↗
Curated list of ransomware gang sites, forums, markets and Telegram channels.
ransomwatch on GitHub
open source
↗
Source code and the machine-readable posts and groups data behind ransomwatch.
ransomware.live API
open source
↗
Free JSON endpoints for recent victims, groups, statistics and negotiations.
ThreatFox
open data
↗
abuse.ch community IOC database: C2 servers, hashes and URLs tagged by family.
MalwareBazaar
open data
↗
abuse.ch sample repository with ransomware family tags and YARA matches.
Identify, recover, report
ID Ransomware
↗
Upload a ransom note or an encrypted file to identify the strain (MalwareHunterTeam).
No More Ransom
↗
Free decryptors and advice from Europol, national police and security vendors.
Emsisoft decryptors
↗
Free decryption tools for dozens of ransomware families.
CISA #StopRansomware
↗
Joint advisories on active groups, the StopRansomware guide and where to report.
← Newer
1
…
75
76
77
78
79
…
114
Older →