200 groups
lockbit3
Activenull
2,021
victims
akira
Active1,270
victims
clop
Active1,126
victims
lockbit2
previous clearnet fqdn lockbitapt.uz
1,005
victims
alphv
Active731
victims
incransom
Active656
victims
bianlian
553
victims
blackbasta
Solve a scrapping issue on 2023-03-08
524
victims
8base
Has been seized
455
victims
dragonforce
Active366
victims
everest
Active353
victims
conti
livechat host contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion
351
victims
dispossessor
344
victims
hunters
Active307
victims
killsec
Active261
victims
cactus
Active248
victims
hive
US announces it seized Hive ransomware gang’s leak sites and decryption keys
208
victims
fog
189
victims
blacksuit
Active184
victims
babuk2
180
victims
funksec
Active172
victims
cloak
Active157
victims
devman
149
victims
blackbyte
Active147
victims
avaddon
146
victims
handala
Active129
victims
ElDorado
112
victims
lockbit5
Active110
victims
cuba
105
victims
arcusmedia
98
victims
interlock
Active96
victims
SilentRansomGroup
Active88
victims
abyss
Active87
victims
coinbasecartel
Active84
victims
apt73
78
victims
cicada3301
75
victims
karakurt
Active74
victims
direwolf
Active71
victims
avoslocker
captcha prevents indexing
70
victims
kairos
Active67
victims
blacklock
64
victims
beast
Active61
victims
flocker
59
victims
anubis
57
victims
darkvault
55
victims
knight
48
victims
BrainCipher
44
victims
darkleakmarket
marketplace - not a ransomware group, reputation questionable
42
victims
donutleaks
42
victims
J
41
victims
genesis
Active41
victims
dragonransomware
Suggested by BreizhCyber.bzh
39
victims
blackshrantac
Active38
victims
crypto24
Active38
victims
helldown
37
victims
chaos
Active36
victims
arvinclub
35
victims
ciphbit
Active35
victims
dread
Activemarketplace - not a ransomware group
34
victims
dAn0n
33
victims
blackmatter
support host supp24maprinktc7uizgfyqhisx7lkszb6ogh6lwdzpac23w3mh4tvyd.onion
32
victims
embargo
Active32
victims
global
32
victims
alphalocker
Active30
victims
frag
30
victims
kelvinsecurity
Activenot a ransomware group
26
victims
doppelpaymer
25
victims
insomnia
Active25
victims
kraken
Active25
victims
blacknevas
Active23
victims
daixin
Active21
victims
gunra
Active20
victims
hellcat
20
victims
leaktheanalyst
not a ransomware group
20
victims
cephalus
19
victims
brotherhood
Active18
victims
d4rk4rmy
18
victims
kawa4096
17
victims
apos
16
victims
bjorka
Active16
victims
datacarry
Active16
victims
dunghill
16
victims
cheers
15
victims
freecivilian
14
victims
argonauts
13
victims
groove
13
victims
IMNCrew
12
victims
benzona
Active11
victims
blackout
Active11
victims
cryp70n1c0d3
not a ransomware group, also ref 7k4y[...]7eid.onion/documents.html
11
victims
icefire
11
victims
crazyhunter
10
victims
darkpower
10
victims
darkrace
10
victims
darkside
10
victims
leaknet
Active9
victims
VanHelsing
8
victims
babuk
8
victims
cryptbb
8
victims
darkwave
8
victims
0mega
Active7
victims
bert
7
victims
bravox
Active7
victims
chort
7
victims
cyclops
7
victims
karma
7
victims
RunSomeWares
6
victims
arkana
6
victims
dataleak
6
victims
egregor
Active6
victims
GDLockerSec
5
victims
ValenciaLeaks
5
victims
bqtlock
5
victims
donex
5
victims
kazu
5
victims
kryptos
5
victims
lockbit
null
5
victims
atomsilo
Active4
victims
blacktor
4
victims
desolator
4
victims
lapsus$
4
victims
linkc
Active4
victims
blackshadow
previous clearnet domain blackshadow.cc
3
victims
bluebox
3
victims
bonacigroup
claim to donate 80% of earnings to charity
3
victims
grief
captcha prevents indexing
3
victims
hellogookie
3
victims
cryptnet
2
victims
ShadowByt3$
Active1
victims
crosslock
1
victims
hades
1
victims
insane
1
victims
la_piovra
1
victims
0apt
0
victims
0xFFF
login page, no posts
0
victims
3am
Active0
victims
Abrahams_Ax
0
victims
C3RB3R
0
victims
ContFR
Active0
victims
SenSayQ
0
victims
ShinySp1d3r
0
victims
aGl0bGVyCg
0
victims
abyss-data
Active0
victims
adminlocker
extensions .admin1 .admin2 .admin3 .1admin .2admin .3admin
0
victims
againstthewest
closed forum, access sold from https://sellix.io/atwforums
0
victims
ailock
Active0
victims
ako
0
victims
antibrok3rs
Active0
victims
avos
0
victims
aware
0
victims
aztroteam
0
victims
babyduck
0
victims
bashe
0
victims
black-nevas
0
victims
black-suit
Active0
victims
blackbyte-crux
Active0
victims
bluelocker
0
victims
bluesky
0
victims
chilelocker
0
victims
cipherforce
0
victims
coinbase-cartel
0
victims
cooming
previous clearnet domain coomingproject.com
0
victims
cry0
Active0
victims
crylock
0
victims
dagonlocker
0
victims
darkangels
accessing over HTTP returns open dir 29/5/22, 89.38.225.166
0
victims
darkbit
0
victims
darkbit01
0
victims
datakeeper
Active0
victims
diavol
0
victims
dunghill_leak
0
victims
ech0raix
0
victims
entropy
captcha prevents indexing
0
victims
ep918
0
victims
eraleign-(apt73)
Active0
victims
evolution
Active0
victims
exorcist
0
victims
fletchen
0
victims
fsteam
0
victims
haron
login page, no posts
0
victims
hellokitty
aka fivehands
0
victims
hiveleak
aka hive
0
victims
holyghost
0
victims
homeland
Active0
victims
hotarus
aka hotarus corp
0
victims
imn-crew
0
victims
inc-ransom
0
victims
j-group
Active0
victims
justice_blade
0
victims
kelvin-security
0
victims
killsec3
Active0
victims
killsecurity
0
victims
kittykatkrew
Active0
victims
kyber
Active0
victims
lambda
0
victims
late.lol
Active0
victims
lilith
0
victims
lockbit3_cronos
0
victims
lockbit3_fs
Activenull
0
victims
lockbit4
Active0
victims
