Ransomware Groups
Track active ransomware operations, dark web infrastructure, and associated threat actors
718
Ransomware Groups
The Syndicate
Data Broker
1 site
Darkmatter
10 sites2026
mortar
2 sites2026
Orova
First seen 2026-07-07
4 sites2026
Global Secret Group
7 sites2026
Exfilsquad
Only exfiltration
1 site2026
GodDamn ransomwhere
Section9
🚨 This is a fake group with fake victims.
1 site2026
Shiba
1 site2026
NotPetya
3 actors
IridiumTeleBots+1
Pink
Gammax
1 site2026
Dark Project
Dark Project is a newly emerged ransomware leak operation active as of August 2026. The group utilizes a double extortion model (stealing sensitive data before encrypting local systems and threatening to leak it on their dark web portal).
9 sites2026
Raptum
1 site2026
Panzer
10 sites2026
Jackalock
1 site2026
Barracuda
1 site2026
L Group
2 sites2026
Storm
1 site2026
Helix
3 sites2026
Sovcali
1 site2026
Umbra
Ethics
2 sites2026
Eclipse
2 sites2026