Ransomware Groups
Track active ransomware operations, dark web infrastructure, and associated threat actors
637
Ransomware Groups
Endurance
1 site2023
Thanos
Pyrx
2 sites2025
C3Rb3R
2 sites1 actor2024
C3RB3R operator
Vandev
Cloak.Su (Locker Leak)
1 site2026
Elonmusknow
1 site2025
Vicesociety
Vice Society ransomware appends the .v-society extension when encrypting Linux machines. Running a leak site on the darkweb, Possible relations with "HelloKitty"
8 sites2021
Lunalock
2 sites2026
Late.Lol
1 site2026
Kazu
1 site2026
Sabbath
2 sites2021
Karakurt
9 sites2023
Lcryptorx
2 sites2025
Crynox
Handala
Not a Ransomware Group
6 sites1 actor2026
Handala Hack Team
Ctblocker
2 sites2024
Helldown
4 sites2024
Darkvault
3 sites2025
Tssxx25
1 site2025
Ironchain
1 site2026
Hyflock
1 site2026
Spirigatito
Arachna Leak
1 site2026