Directory
Published directory entries matching your search.
Ransomware.live tracks and monitors ransomware groups' victims and their activity. Created by security researcher Julien Mousqueton, it provides information on ransomware groups, victims, negotiations, and payment demands, and includes a live map showing the latest ransomware attacks.
ID Ransomware is a service that identifies ransomware from an uploaded ransom note or sample encrypted file. The site states it currently detects 1188 different ransomwares and offers a dynamic list of detected families.
RansomLook is an open-source intelligence site that tracks ransomware groups, markets and threat actors, displaying posts and activity statistics. It reports 35,915 ransomware posts across 634 groups, 147 markets and 32 actors, alongside leak, ransom note and crypto address counts. An API and torrent intelligence features are listed.
Research article cataloging ransomware leak sites and explaining how their status is tracked.
News archive covering dark-web leaks, criminal forums, takedowns and ransomware activity.
Dark-web intelligence company publishing monitoring, ransomware and underground-ecosystem analysis.
A blog from DarkOwl whose analysts publish insights on darknet intelligence, threat detection and cybersecurity trends. Posts include a darknet marketplace snapshot series and articles on breach data and ransomware. The blog states it offers news, research and resources for enterprises and security professionals.
eCrime.ch is an extortion exposure monitoring platform for enterprise security, incident response and third-party risk teams. It detects, verifies and delivers ransomware and data-leak signals with context such as entity mapping, artifacts, links and timelines. The site states it monitors 280+ extortion and leak sources and delivers alerts through dashboard, email, Slack, API and reports. A REST API provides tracker, intelligence, file-search, screenshot, actor, leak-site and torrent-monitoring data.
Intelligence analysis covering illicit communities, ransomware groups and underground online activity.
Intelligence reporting on cybercriminal groups, underground forums and ransomware operations.
Analyst reporting on cybercrime marketplaces, underground actors, ransomware and stolen-data trends.
Open-source tracker monitoring ransomware leak sites and publishing structured status data.
Emsisoft ransomware decryptor page for Avaddon recovery information and related security tooling.
JpegMedic ARWE is a tool for automatic batch recovery of JPG files partially encrypted by ransomware. It offers two recovery modes, one requiring a non-damaged JPG file from the same camera and settings, and one using heuristic algorithms. It can also extract JPG thumbnails from encrypted RAW files. It is described as a smaller sibling of JpegMedic.
Medicat is a toolkit that helps compile a selection of the latest computer diagnostic and recovery tools into an easy to use toolkit. The site lists password removal tools, ransomware and malware recovery, partitioning and disk utilities, and backup and data recovery. A documentation collection is offered as a work in progress.
OISD is a domain blocklist that prevents devices from connecting to unwanted or harmful domains. It aims to reduce ads, lower malware risk and enhance privacy, prioritizing functionality over blocking. The big list blocks ads, phishing, malvertising, malware, spyware, ransomware, cryptojacking and telemetry or tracking, while a separate NSFW list blocks porn, adult, shock and gore domains. Support for HOSTS and domains syntax was discontinued starting January 1st, 2024.
Osintme.com is a blog by Matt publishing articles and resource lists for OSINT investigators. Posts cover web browsers and Linux desktop apps for OSINT machines, Reddit research tools and techniques, darkweb resources, favicons in website research, ransomware research resources, and recommended OSINT newsletters. It also covers CISSP exam study tips.
rifteyy is an independent malware analyst from the Czech Republic. The site collects in-depth malware and ransomware analysis reports, reverse engineering breakdowns, and security research. The analyst describes himself as a computer science student, tech support and teacher at a primary school, and a Malware Removal Expert on various forums. Malware removal help is handled through public forums, not through socials or email.
