⚡ UPDATES EVERY HOUR - THREAT MONITORING

◆ RANSOMWARE CTI

Ransomware Intelligence

Live ransomware command center: victims, leak-site groups, global map, threat feeds, CVEs, and ATT&CK.

Σ
–
TOTAL VICTIMS
G
–
ACTIVE GROUPS
24
–
LAST 24H
7D
–
LAST 7 DAYS
🔥
–
HOTTEST GROUP
MITRE ATT&CK ENTERPRISE
T
–
TECHNIQUES
S
–
SUB-TECHNIQUES
G
–
THREAT GROUPS
M
–
SOFTWARE
D
–
MITIGATIONS
loading…
◆ ALERTS — new groups · victim spikes · new ransomware-linked KEVs · checked every ~3h after new data lands
loading…
◆ VICTIM LOOKUP — search every leak-site post we hold for a company or domain · returns name, date, group and country only
◆ THE DESKS
◆ DATA DOWNLOADS — JSON · LAST 7 DAYS ONLY · BUILT LIVE FROM THE SAME DATA AS THE DESKS7-DAY WINDOW · DEFANGED
FILECONTENTSRECORDSDATA AS OF
loading…
Every file covers the last 7 days only (add ?days=1…7 for a shorter window; longer windows are capped at 7). Website values are defanged text, onion addresses are never included, and no IOC is published as a link. Free for research and defensive use.
Need more than 7 days of data? Email me.