200 groups
lockbit3
Activenull
2,021
victims
akira
Active1,293
victims
clop
1,126
victims
lockbit2
previous clearnet fqdn lockbitapt.uz
1,005
victims
alphv
Active731
victims
incransom
Active694
victims
bianlian
553
victims
blackbasta
Solve a scrapping issue on 2023-03-08
524
victims
8base
Has been seized
455
victims
dragonforce
Active390
victims
everest
Active353
victims
conti
livechat host contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion
351
victims
dispossessor
344
victims
hunters
307
victims
killsec
261
victims
cactus
248
victims
hive
US announces it seized Hive ransomware gang’s leak sites and decryption keys
208
victims
fog
189
victims
blacksuit
184
victims
babuk2
180
victims
funksec
172
victims
cloak
157
victims
devman
149
victims
blackbyte
147
victims
avaddon
146
victims
handala
Active129
victims
interlock
Active119
victims
ElDorado
112
victims
lockbit5
Active110
victims
cuba
105
victims
arcusmedia
Active98
victims
abyss
Active90
victims
SilentRansomGroup
88
victims
coinbasecartel
84
victims
apt73
78
victims
cicada3301
75
victims
karakurt
74
victims
chaos
Active73
victims
direwolf
71
victims
avoslocker
captcha prevents indexing
70
victims
kairos
67
victims
blacklock
64
victims
beast
61
victims
genesis
61
victims
flocker
59
victims
anubis
57
victims
darkvault
55
victims
knight
48
victims
BrainCipher
44
victims
crypto24
Active44
victims
darkleakmarket
marketplace - not a ransomware group, reputation questionable
42
victims
donutleaks
42
victims
J
41
victims
dragonransomware
Suggested by BreizhCyber.bzh
39
victims
embargo
Active39
victims
blackshrantac
38
victims
helldown
37
victims
arvinclub
35
victims
ciphbit
35
victims
dread
marketplace - not a ransomware group
34
victims
dAn0n
33
victims
blackmatter
support host supp24maprinktc7uizgfyqhisx7lkszb6ogh6lwdzpac23w3mh4tvyd.onion
32
victims
global
32
victims
alphalocker
Active30
victims
frag
30
victims
kelvinsecurity
not a ransomware group
26
victims
doppelpaymer
25
victims
insomnia
25
victims
kraken
25
victims
blacknevas
Active23
victims
daixin
Active21
victims
gunra
20
victims
hellcat
20
victims
leaktheanalyst
not a ransomware group
20
victims
cephalus
19
victims
brotherhood
18
victims
d4rk4rmy
18
victims
kawa4096
17
victims
apos
16
victims
bjorka
Active16
victims
datacarry
16
victims
dunghill
16
victims
cheers
15
victims
kazu
Active15
victims
freecivilian
14
victims
argonauts
13
victims
groove
13
victims
IMNCrew
12
victims
benzona
11
victims
blackout
Active11
victims
cryp70n1c0d3
not a ransomware group, also ref 7k4y[...]7eid.onion/documents.html
11
victims
icefire
11
victims
crazyhunter
10
victims
darkpower
10
victims
darkrace
10
victims
darkside
10
victims
leaknet
Active9
victims
VanHelsing
8
victims
babuk
8
victims
cryptbb
8
victims
darkwave
8
victims
0mega
Active7
victims
bert
7
victims
bravox
7
victims
chort
7
victims
cyclops
7
victims
karma
7
victims
RunSomeWares
6
victims
arkana
6
victims
dataleak
6
victims
egregor
6
victims
GDLockerSec
5
victims
ValenciaLeaks
5
victims
bqtlock
5
victims
donex
5
victims
kryptos
5
victims
linkc
5
victims
lockbit
null
5
victims
atomsilo
Active4
victims
blacktor
4
victims
desolator
4
victims
lapsus$
4
victims
blackshadow
previous clearnet domain blackshadow.cc
3
victims
bluebox
3
victims
bonacigroup
claim to donate 80% of earnings to charity
3
victims
grief
captcha prevents indexing
3
victims
hellogookie
3
victims
cryptnet
2
victims
ShadowByt3$
1
victims
crosslock
1
victims
hades
1
victims
insane
1
victims
la_piovra
1
victims
0apt
0
victims
0xFFF
login page, no posts
0
victims
3am
0
victims
Abrahams_Ax
0
victims
C3RB3R
0
victims
ContFR
0
victims
SenSayQ
0
victims
ShinySp1d3r
0
victims
aGl0bGVyCg
0
victims
abyss-data
Active0
victims
adminlocker
extensions .admin1 .admin2 .admin3 .1admin .2admin .3admin
0
victims
againstthewest
closed forum, access sold from https://sellix.io/atwforums
0
victims
ailock
0
victims
ako
0
victims
antibrok3rs
Active0
victims
avos
0
victims
aware
0
victims
aztroteam
0
victims
babyduck
0
victims
bashe
0
victims
black-nevas
0
victims
black-suit
0
victims
blackbyte-crux
0
victims
bluelocker
0
victims
bluesky
0
victims
chilelocker
0
victims
cipherforce
0
victims
coinbase-cartel
0
victims
cooming
previous clearnet domain coomingproject.com
0
victims
cry0
Active0
victims
crylock
0
victims
dagonlocker
0
victims
darkangels
accessing over HTTP returns open dir 29/5/22, 89.38.225.166
0
victims
darkbit
0
victims
darkbit01
0
victims
datakeeper
0
victims
diavol
0
victims
dunghill_leak
0
victims
ech0raix
0
victims
entropy
captcha prevents indexing
0
victims
ep918
0
victims
eraleign-(apt73)
Active0
victims
evolution
0
victims
exorcist
0
victims
fletchen
0
victims
fsteam
0
victims
haron
login page, no posts
0
victims
hellokitty
aka fivehands
0
victims
hiveleak
aka hive
0
victims
holyghost
0
victims
homeland
0
victims
hotarus
aka hotarus corp
0
victims
imn-crew
0
victims
inc-ransom
0
victims
j-group
0
victims
justice_blade
Active0
victims
kelvin-security
0
victims
killsec3
Active0
victims
killsecurity
0
victims
kittykatkrew
0
victims
kyber
Active0
victims
lambda
0
victims
late.lol
0
victims
lilith
0
victims
lockbit3_cronos
0
victims
lockbit3_fs
null
0
victims
lockbit4
0
victims