Current list of monitored ransomware threat actors
| Name | Tor / Clearnet | Status |
|---|---|---|
| 54bb47h | Tor | OFFLINE |
| 0mega | Tor | ONLINE |
| 0mega | Clearnet | ONLINE |
| 54bb47h | Tor | OFFLINE |
| AgainstTheWest | Tor | OFFLINE |
| AKO | Tor | OFFLINE |
| ALPHV | Tor | OFFLINE |
| ALPHV | Tor | ONLINE |
| ALPHV | Tor | ONLINE |
| ARVIN | Tor | OFFLINE |
| ARVIN | Tor | OFFLINE |
| ASTROTEAM | Tor | OFFLINE |
| ATOMSILO | Tor | OFFLINE |
| ATOMSILO | Tor | OFFLINE |
| AVADDON | Tor | OFFLINE |
| AVOS | Tor | ONLINE |
| AVOS | Tor | OFFLINE |
| BABUK | Tor | OFFLINE |
| BABUK | Tor | ONLINE |
| BABYDUCK | Tor | OFFLINE |
| BIANLIAN | Tor | ONLINE |
| BIT/LOLKEK/GLOBEIMPOSTER | Tor | ONLINE |
| BLACKBASTA | Tor | ONLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKMATTER | Tor | OFFLINE |
| BLACKMATTER Support | Tor | OFFLINE |
| BLACK SHADOW | Clearnet | OFFLINE |
| BLACK SHADOW | Tor | OFFLINE |
| BLUE SKY | Tor | ONLINE |
| BONACI GROUP | Tor | OFFLINE |
| CHEERS | Tor | ONLINE |
| CLOP | Tor | ONLINE |
| CLOP | Tor | OFFLINE |
| CONTI/RYUK | Tor | OFFLINE |
| CONTI/RYUK | Clearnet | OFFLINE |
| COOMINGPROJECT | Tor | OFFLINE |
| COOMINGPROJECT | Tor | OFFLINE |
| COOMINGPROJECT | Clearnet | OFFLINE |
| CRIMSON WALRUS | Tor | OFFLINE |
| CRYLOCK | Tor | OFFLINE |
| CRYP70N1C0D3 | Tor | OFFLINE |
| CUBA | Tor | OFFLINE |
| CUBA | Tor | ONLINE |
| DAIXIN | Tor | ONLINE |
| DARK ANGELS | Tor | ONLINE |
| DARKSIDE | Tor | OFFLINE |
| DOPPLE PAYMER | Tor | OFFLINE |
| DOTADMIN | Tor | OFFLINE |
| ECH0RAIX | Tor | OFFLINE |
| ENTROPY | Tor | OFFLINE |
| EP918 | Tor | OFFLINE |
| EVEREST | Tor | ONLINE |
| EVILCORP | Tor | OFFLINE |
| EXORCIST | Tor | OFFLINE |
| FREE CIVILIAN | Tor | ONLINE |
| GOODWILL | Clearnet | OFFLINE |
| GRIEF | Tor | OFFLINE |
| GROOVE | Tor | OFFLINE |
| HADES | Tor | OFFLINE |
| HARON | Tor | OFFLINE |
| HELLO KITTY | Tor | OFFLINE |
| HIVE | Tor | ONLINE |
| HIVE | Tor | ONLINE |
| HOLYGHOST | Tor | OFFLINE |
| HOTARUS | Tor | OFFLINE |
| KARAKURT | Tor | OFFLINE |
| KARAKURT | Tor | ONLINE |
| KARAKURT | Tor | ONLINE |
| KARMA | Tor | OFFLINE |
| LILITH | Tor | ONLINE |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Clearnet | OFFLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT | Tor | OFFLINE |
| LOCKFILE | Tor | OFFLINE |
| LORENZ | Tor | ONLINE |
| LV | Tor | ONLINE |
| LV | Tor | OFFLINE |
| MARKETO | Clearnet | OFFLINE |
| MARKETO | Tor | OFFLINE |
| MARKETO | Tor | OFFLINE |
| MARKETO | Tor | OFFLINE |
| MBC | Tor | OFFLINE |
| MEDUSA LOCKER | Tor | ONLINE |
| MIDAS/HARON | Tor | OFFLINE |
| MINDWARE | Tor | OFFLINE |
| Moses Staff | Clearnet | ONLINE |
| Moses Staff | Tor | OFFLINE |
| MOUNT LOCKER | Tor | OFFLINE |
| MYDECRYPTOR | Tor | OFFLINE |
| N3TW0RM | Tor | OFFLINE |
| NEFILIM | Tor | OFFLINE |
| NEMTY | Clearnet | OFFLINE |
| NEMTY | Tor | OFFLINE |
| NETWALKER | Tor | OFFLINE |
| NightSky | Tor | OFFLINE |
| NOKOYAWA | Tor | ONLINE |
| ONEPERCENT | Tor | OFFLINE |
| ONYX | Tor | OFFLINE |
| PANDORA | Tor | OFFLINE |
| PAY2KEY | Tor | OFFLINE |
| PAYLOAD.BIN | Tor | OFFLINE |
| PROLOCK | Tor | OFFLINE |
| PROMETHEUS | Tor | OFFLINE |
| PYSA | Tor | OFFLINE |
| QLOCKER | Tor | ONLINE |
| QUANTUM | Tor | ONLINE |
| QUANTUM | Clearnet | ONLINE |
| QUANTUM | Clearnet | ONLINE |
| RAGNAR LOCKER | Tor | OFFLINE |
| RAGNAR LOCKER | Tor | ONLINE |
| RAGNAR LOCKER | Clearnet | OFFLINE |
| RAGNAROK | Tor | OFFLINE |
| RAGNAROK | Tor | OFFLINE |
| RANSOM CARTEL | Tor | OFFLINE |
| RANSOMEXX | Tor | ONLINE |
| RANSOM HOUSE | Tor | ONLINE |
| RANZY/AKO | Tor | OFFLINE |
| REDALERT | Tor | ONLINE |
| REVIL | Tor | OFFLINE |
| REVIL | Tor | ONLINE |
| REVIL | Tor | ONLINE |
| ROOK | Tor | OFFLINE |
| RRANSOM | Tor | ONLINE |
| SNATCH | Clearnet | ONLINE |
| SNATCH | Clearnet | OFFLINE |
| SNATCH | Tor | ONLINE |
| SODINOKIBI | Tor | OFFLINE |
| SPOOK DATA | Tor | OFFLINE |
| STORMOUS | Tor | OFFLINE |
| SUGAR | Tor | OFFLINE |
| SUGAR | Clearnet | OFFLINE |
| SUNCRYPT | Tor | OFFLINE |
| SUNCRYPT | Tor | ONLINE |
| SynACK | Tor | OFFLINE |
| VFOKX | Tor | OFFLINE |
| VFOKX | Tor | OFFLINE |
| VICE SOCIETY | Tor | OFFLINE |
| VICE SOCIETY | Tor | ONLINE |
| VICE SOCIETY | Tor | ONLINE |
| X001XS | Tor | ONLINE |
| XING LOCKER | Tor | OFFLINE |
| XINOF | Tor | OFFLINE |
| YANLUOWANG | Tor | ONLINE |
| ZEON | Tor | ONLINE |