Ransomware.live tracks and monitors ransomware groups' victims and their activity. Created by security researcher Julien Mousqueton, it provides information on ransomware groups, victims, negotiations, and payment demands, and includes a live map showing the latest ransomware attacks.
Directory
Search results
Published directory entries matching your search.
Research article cataloging ransomware leak sites and explaining how their status is tracked.
RansomLook is an open-source intelligence site that tracks ransomware groups, markets and threat actors, displaying posts and activity statistics. It reports 35,915 ransomware posts across 634 groups, 147 markets and 32 actors, alongside leak, ransom note and crypto address counts. An API and torrent intelligence features are listed.
eCrime.ch is an extortion exposure monitoring platform for enterprise security, incident response and third-party risk teams. It detects, verifies and delivers ransomware and data-leak signals with context such as entity mapping, artifacts, links and timelines. The site states it monitors 280+ extortion and leak sources and delivers alerts through dashboard, email, Slack, API and reports. A REST API provides tracker, intelligence, file-search, screenshot, actor, leak-site and torrent-monitoring data.
A blog from DarkOwl whose analysts publish insights on darknet intelligence, threat detection and cybersecurity trends. Posts include a darknet marketplace snapshot series and articles on breach data and ransomware. The blog states it offers news, research and resources for enterprises and security professionals.
Analyst reporting on cybercrime marketplaces, underground actors, ransomware and stolen-data trends.
Open-source tracker monitoring ransomware leak sites and publishing structured status data.
Osintme.com is a blog by Matt publishing articles and resource lists for OSINT investigators. Posts cover web browsers and Linux desktop apps for OSINT machines, Reddit research tools and techniques, darkweb resources, favicons in website research, ransomware research resources, and recommended OSINT newsletters. It also covers CISSP exam study tips.
Emsisoft ransomware decryptor page for Avaddon recovery information and related security tooling.
rifteyy is an independent malware analyst from the Czech Republic. The site collects in-depth malware and ransomware analysis reports, reverse engineering breakdowns, and security research. The analyst describes himself as a computer science student, tech support and teacher at a primary school, and a Malware Removal Expert on various forums. Malware removal help is handled through public forums, not through socials or email.