Skip to content

Latest commit

 

History

History
140 lines (140 loc) · 13.1 KB

ransomware_gang.md

File metadata and controls

140 lines (140 loc) · 13.1 KB
Name Link Status User:Password Tox ID or other channel RSS Feed
RANSOM DB https://www.ransom-db.com
RANSOMWARE GROUP SITES (list) http://thexfvx7hqcrpgtm.onion (CURRENTLY DOWN)
RANSOMWARE GROUP SITES (list) http://ransomwr3tsydeii4q43vazm7wofla5ujdajquitomtd47cxjtfgwyyd.onion
RANSOMWARE GROUP SITES (list) http://ranswikiif2mir7mnnscyrsvppxmwwqrvc43fhtddvtnmhedkj4hopyd.onion
54bb47h http://54bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion/blog (CURRENTLY DOWN)
54bb47h http://54bb47h.blog
54bb47h (victims page) http://54bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion (CURRENTLY DOWN)
AgainstTheWest http://giphvoitymatg4cv7bxqh5dz6sn6bfscywoat4qtslztkomf5lavrayd.onion/ (CURRENTLY DOWN)
AKO http://kwvhrdibgmmpkhkidrby4mccwqpds5za6uo2thcw5gz75qncv7rbhyad.onion (CURRENTLY DOWN)
ALPHV (aka BlackCat) (1) http://2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onion (CURRENTLY DOWN) 3488458145EB62D7D3947E3811234F4663D9B5AEEF6584AB08A2099A7F946664BBA2B0D30BFC
ALPHV (aka BlackCat) (2) http://alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion
ASTROTEAM http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion (CURRENTLY DOWN)
ATOMSILO http://mhdehvkomeabau7gsetnsrhkfign4jgnx3wajth5yb5h6kvzbd72wlqd.onion (CURRENTLY DOWN)
ATOMSILO http://l5cjga2ksw6rxumu5l4xxn3cmahhi2irkbwg3amx6ajroyfmfgpfllid.onion (CURRENTLY DOWN)
AVADDON http://avaddongun7rngel.onion (CURRENTLY DOWN)
AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion (CURRENTLY DOWN) YES
AVOS (victims request id page) http://avos2fuj6olp6x36.onion (CURRENTLY DOWN)
BABUK (old) http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion (CURRENTLY DOWN)
BABUK http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion
BABYDUCK (victims request id Page) http://babydovegkmhbontykziyq7qivwzy33mu4ukqefe4mqpiiwd3wibnjqd.onion (CURRENTLY DOWN)
BIT/LOLKEK/GLOBEIMPOSTER (SUPPORT PAGE) http://mmeeiix2ejdwkmseycljetmpiwebdvgjts75c63camjofn2cjdoulzqd.onion
BLACKBYTE (1) http://6iaj3efye3q62xjgfxyegrufhewxew7yt4scxjd45tlfafyja6q4ctqd.onion (CURRENTLY DOWN)
BLACKBYTE (2) http://f5uzduboq4fa2xkjloprmctk7ve3dm46ff7aniis66cbekakvksxgeqd.onion (CURRENTLY DOWN)
BLACKBYTE (NEW) http://dlyo7r3n4qy5fzv4645nddjwarj7wjdd6wzckomcyc7akskkxp4glcad.onion
BLACKMATTER http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion (CURRENTLY DOWN)
BLACKMATTER Support http://supp24maprinktc7uizgfyqhisx7lkszb6ogh6lwdzpac23w3mh4tvyd.onion/EWX33VYY3IGOXSG5ZZ2 (CURRENTLY DOWN)
BLACK SHADOW (DEEP WEB) https://blackshadow.cc (CURRENTLY DOWN)
BLACK SHADOW http://544corkfh5hwhtn4.onion (CURRENTLY DOWN)
BONACI GROUP http://bonacifryrxr4siz6ptvokuihdzmjzpveruklxumflz5thmkgauty2qd.onion (CURRENTLY DOWN)
CLOP http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion
CLOP (old) http://ekbgzchl6x2ias37.onion (CURRENTLY DOWN)
CONTI/RYUK http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion
CONTI/RYUK (SURFACE WEB) https://continews.click
COOMINGPROJECT http://teo7aj5mfgzxyeme.onion (CURRENTLY DOWN)
COOMINGPROJECT (new) http://z6mikrtphid5fmn52nbcbg25tj57sowlm3oc25g563yvsfmygkcxqbyd.onion (CURRENTLY DOWN)
COOMINGPROJECT (SURFACE WEB) http://coomingproject.com (CURRENTLY DOWN)
CRYLOCK (victims request id page) http://d57uremugxjrafyg.onion (CURRENTLY DOWN)
CRYP70N1C0D3 http://7k4yyskpz3rxq5nyokf6ztbpywzbjtdfanweup3skctcxopmt7tq7eid.onion
COOMINGPROJECT http://teo7aj5mfgzxyeme.onion (CURRENTLY DOWN)
COOMINGPROJECT (new) http://z6mikrtphid5fmn52nbcbg25tj57sowlm3oc25g563yvsfmygkcxqbyd.onion (CURRENTLY DOWN)
COOMINGPROJECT (SURFACE WEB) http://coomingproject.com (CURRENTLY DOWN)
CRYLOCK (victims request id page) http://d57uremugxjrafyg.onion (CURRENTLY DOWN)
CUBA http://cuba4mp6ximo2zlo.onion (CURRENTLY DOWN)
CUBA http://cuba4ikm4jakjgmkezytyawtdgr2xymvy6nvzgw5cglswg3si76icnqd.onion
DARKRYPT https://darkrypt.io (CURRENTLY DOWN)
DARKSIDE http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion (CURRENTLY DOWN)
DOPPLE PAYMER http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion (CURRENTLY DOWN)
DOTADMIN http://adminavf4cikzbv6mbbp7ujpwhygnn2t3egiz2pswldj32krrml42wyd.onion @dotADMINbot (Telegram)
ECH0RAIX http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion (CURRENTLY DOWN)
EGREGOR https://egregornews.com (CURRENTLY DOWN)
ENTROPY http://leaksv7sroztl377bbohzl42i3ddlfsxopcb6355zc7olzigedm5agad.onion
EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion (CURRENTLY DOWN)
EVEREST http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion YES
EVILCORP http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion (CURRENTLY DOWN)
EXORCIST http://7iulpt5i6whht6zo2r52f7vptxtjxs3vfcdxxazllikrtqpupn4epnqd.onion (CURRENTLY DOWN)
FREE CIVILIAN (attacks Ukrainian government agencies) http://gcbejm2rcjftouqbxuhimj5oroouqcuxb2my4raxqa7efkz5bd5464id.onion/ 78DB22E30C48561EF8B63AFF7702B237A4797017EBC3630853CF6F11F8706A3A84AB112760AF
GRIEF http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion
GROOVE http://ws3dh6av66sjbxxkjpw5ao3wqzmtejnkzheswm4dz5rrwvular7xvkqd.onion (CURRENTLY DOWN)
HADES http://ixltdyumdlthrtgx.onion (CURRENTLY DOWN)
HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion/blog.php (CURRENTLY DOWN) Chaddadgroup:Chaddadgroup
HELLO KITTY http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion (CURRENTLY DOWN)
HITLER http://hitleransomware.cf (CURRENTLY DOWN)
HIVE http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion
HIVE (negotiation) http://hivecust6vhekztbqgdnkks64ucehqacge3dij3gyrrpdp57zoq3ooqd.onion random generated user/pass in ransom note
HOLYGHOST http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion (CURRENTLY DOWN)
HOTARUS http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion (CURRENTLY DOWN)
KARAKURT https://karakurt.tech (CURRENTLY DOWN)
KARAKURT 2.0 https://209.222.98.19
KARMA http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion (CURRENTLY DOWN)
LOCKBIT 2.0 (mirror 1) http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 2) http://lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 3) http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 4) http://lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 5) http://lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 6) http://lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 7) http://lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 8) http://oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (mirror 9) http://yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7
LOCKBIT 2.0 (SURFACE WEB) http://www.lockbitapt.uz (CURRENTLY DOWN)
LOCKBIT http://lockbitkodidilol.onion (CURRENTLY DOWN)
LOCKFILE (victim request id page) http://zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion (CURRENTLY DOWN) B2F873769EB6B508EBC2103DDEB7366CEFB7B09AB8314DAD0C4346169072686690489B47EAEB
LORENZ http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion
LV (1) http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion
LV (2) http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion (CURRENTLY DOWN)
MARKETO (DEEP WEB) https://marketo.cloud
MARKETO (tor v2) http://g5sbltooh2okkcb2.onion (CURRENTLY DOWN)
MARKETO (tor v3 new) http://jvdamsif53dqjycuozlaye2s47p7xij4x6hzwzwhzrqmv36gkyzohhqd.onion
MARKETO (tor v3 old) http://fvki3hj7uxuirxpeop6chgqoczanmebutznt2mkzy6waov6w456vjuid.onion (CURRENTLY DOWN)
MAZE https://newsmaze.net (CURRENTLY DOWN)
MBC http://xembshruusobgbvxg4tcjs3jpdnks6xrr6nbokfxadcnlc53yxir22ad.onion (CURRENTLY DOWN)
MEDUSA LOCKER http://qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion
MIDAS/HARON http://midasbkic5eyfox4dhnijkzc7v7e4hpmsb2qgux7diqbpna4up4rtdad.onion/blog.php
Moses Staff (DEEP WEB) http://moses-staff.se
Moses Staff http://mosesstaffm7hptp.onion (CURRENTLY DOWN)
MOUNT LOCKER http://mountnewsokhwilx.onion (CURRENTLY DOWN)
MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion (CURRENTLY DOWN)
N3TW0RM http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion (CURRENTLY DOWN)
NEFILIM http://hxt254aygrsziejn.onion (CURRENTLY DOWN)
NEMTY http://nemty.top (CURRENTLY DOWN)
NEMTY http://zjoxyw5mkacojk5ptn2iprkivg5clow72mjkyk5ttubzxprjjnwapkad.onion (CURRENTLY DOWN)
NETWALKER http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN)
NightSky http://gg5ryfgogainisskdvh4y373ap3b2mxafcibeh2lvq5x7fx76ygcosad.onion (CURRENTLY DOWN)
ONEPERCENT http://5mvifa3xq5m7sou3xzaajfz7h6eserp5fnkwotohns5pgbb5oxty3zad.onion (CURRENTLY DOWN)
PAY2KEY http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion
PAYLOAD.BIN (EX BABUK LOCKER) http://vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion (CURRENTLY DOWN)
PROLOCK http://msaoyrayohnp32tcgwcanhjouetb5k54aekgnwg7dcvtgtecpumrxpqd.onion (CURRENTLY DOWN)
PROMETHEUS http://promethw27cbrcot.onion/blog (CURRENTLY DOWN)
PYSA http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html
QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion
QUANTUM http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion
RAGNAR LOCKER http://p6o7m73ujalhgkiv.onion (CURRENTLY DOWN)
RAGNAR LOCKER http://rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion
RAGNAR LOCKER (old) http://ragnarleaks.top (CURRENTLY DOWN)
RAGNAROK http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion (CURRENTLY DOWN)
RAGNAROK http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion (CURRENTLY DOWN)
RANSOM CARTEL http://u67aylig7i6l657wxmp274eoilaowhp3boljowa6bli63rxyzfzsbtyd.onion/
RANSOMEXX http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion
RANZY/AKO http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion (CURRENTLY DOWN)
REVIL http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion (CURRENTLY DOWN)
ROBINHOOD https://robinhoodleaks.tumblr.com (CURRENTLY DOWN)
ROOK http://gamol6n6p2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onion (CURRENTLY DOWN)
RRANSOM (victims page) http://t2tqvp4pctcr7vxhgz5yd5x4ino5tw7jzs3whbntxirhp32djhi7q3id.onion/check_payment_form (CURRENTLY DOWN)
SEKHMET http://sekhmet.top (CURRENTLY DOWN)
SNATCH (DEEP WEB) https://snatch.press/
SNATCH (DEEP WEB) http://snatch.vip (CURRENTLY DOWN)
SNATCH http://hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion/index.php
SODINOKIBI (REVIL) http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion (CURRENTLY DOWN)
SPOOK DATA http://spookuhvfyxzph54ikjfwf2mwmxt572krpom7reyayrmxbkizbvkpaid.onion/blog/ (CURRENTLY DOWN) YES
SUNCRYPT (tor v2) http://nbzzb6sa6xuura2z.onion (CURRENTLY DOWN)
SUNCRYPT (tor v3) http://x2miyuiwpib2imjr5ykyjngdu7v6vprkkhjltrk4qafymtawey4qzwid.onion
SynACK (El_Cometa) http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion (CURRENTLY DOWN)
VFOKX (1) http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion (CURRENTLY DOWN)
VFOKX (2) http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion (CURRENTLY DOWN)
VICE SOCIETY http://4hzyuotli6maqa4u.onion (CURRENTLY DOWN)
X001XS http://nalr2uqsave7y2r235am5jsfiklfjh5h4jc5nztu3rzvmhklwt5j6kid.onion
VICE SOCIETY http://vsociethok6sbprvevl4dlwbqrzyhxcxaqpvcqt5belwvsuxaxsutyad.onion
XING LOCKER http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion (CURRENTLY DOWN)
XINOF http://wj3b2wtj7u2bzup75tzhnso56bin6bnvsxcbwbfcuvzpc4vcixbywlid.onion (CURRENTLY DOWN)