Current list of monitored ransomware threat actors
| Name | Tor / Clearnet | Status |
|---|---|---|
| eCrime Services | Clearnet | ONLINE |
| RANSOMWARE GROUPS MONITORING TOOL | Clearnet | ONLINE |
| 54bb47h | Tor | OFFLINE |
| 0mega | Tor | ONLINE |
| 54bb47h | Clearnet | OFFLINE |
| 54bb47h | Tor | OFFLINE |
| Abrahams Ax | Tor | ONLINE |
| AgainstTheWest | Tor | OFFLINE |
| AKO | Tor | OFFLINE |
| ALPHV | Tor | OFFLINE |
| ALPHV | Tor | ONLINE |
| ALPHV | Tor | ONLINE |
| ARVIN | Tor | OFFLINE |
| ARVIN | Tor | OFFLINE |
| ASTROTEAM | Tor | OFFLINE |
| ATOMSILO | Tor | OFFLINE |
| ATOMSILO | Tor | OFFLINE |
| AVADDON | Tor | OFFLINE |
| AVOS | Tor | ONLINE |
| AVOS | Tor | OFFLINE |
| BABUK | Tor | OFFLINE |
| BABUK | Tor | ONLINE |
| BABYDUCK | Tor | OFFLINE |
| BIANLIAN | Tor | OFFLINE |
| BIT/LOLKEK/GLOBEIMPOSTER | Tor | OFFLINE |
| BIT/LOLKEK/GLOBEIMPOSTER | Tor | OFFLINE |
| BIT/LOLKEK/GLOBEIMPOSTER | Tor | ONLINE |
| BLACKBASTA | Tor | ONLINE |
| BLACKBASTA | Tor | ONLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | OFFLINE |
| BLACKBYTE | Tor | ONLINE |
| BLACKMATTER | Tor | OFFLINE |
| BLACKMATTER Support | Tor | OFFLINE |
| BLACK SHADOW | Tor | OFFLINE |
| BLUE SKY | Tor | ONLINE |
| BONACI GROUP | Tor | OFFLINE |
| CHEERS | Tor | OFFLINE |
| CHILE LOCKER | Tor | ONLINE |
| CLOP | Tor | ONLINE |
| CLOP | Tor | OFFLINE |
| CONTI/RYUK | Tor | OFFLINE |
| COOMINGPROJECT | Tor | OFFLINE |
| COOMINGPROJECT | Tor | OFFLINE |
| CRIMSON WALRUS | Tor | OFFLINE |
| CRYLOCK | Tor | OFFLINE |
| CRYP70N1C0D3 | Tor | OFFLINE |
| CUBA | Tor | OFFLINE |
| CUBA | Tor | ONLINE |
| DAGON LOCKER | Tor | OFFLINE |
| DAIXIN | Tor | ONLINE |
| DARK ANGELS | Tor | OFFLINE |
| DARKRYPT | Clearnet | OFFLINE |
| DARKSIDE | Tor | OFFLINE |
| DONUT BLOG | Tor | OFFLINE |
| DONUT DLS | Tor | OFFLINE |
| DOPPLE PAYMER | Tor | OFFLINE |
| DOTADMIN | Tor | OFFLINE |
| ECH0RAIX | Tor | OFFLINE |
| ENDURANCE | Tor | OFFLINE |
| EGREGOR | Clearnet | OFFLINE |
| ENTROPY | Tor | OFFLINE |
| EP918 | Tor | OFFLINE |
| EVEREST | Tor | ONLINE |
| EVILCORP | Tor | OFFLINE |
| EXORCIST | Tor | OFFLINE |
| FREE CIVILIAN | Tor | OFFLINE |
| FS-TEAM | Tor | ONLINE |
| GRIEF | Tor | OFFLINE |
| GROOVE | Tor | OFFLINE |
| HADES | Tor | OFFLINE |
| HARON | Tor | OFFLINE |
| HELLO KITTY | Tor | OFFLINE |
| HITLER | Clearnet | OFFLINE |
| HIVE | Tor | ONLINE |
| HIVE | Tor | ONLINE |
| HOLYGHOST | Tor | OFFLINE |
| HOTARUS | Tor | OFFLINE |
| ICEFIRE | Tor | OFFLINE |
| INDUSTRIAL SPY | Tor | ONLINE |
| JUSTICE BLADE | Clearnet | OFFLINE |
| KARAKURT | Tor | OFFLINE |
| KARAKURT | Tor | ONLINE |
| KARAKURT | Tor | ONLINE |
| KARMA | Tor | OFFLINE |
| KELVIN SECURITY | Clearnet | ONLINE |
| LILITH | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | REBRANDED TO LB 3 |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 2.0 | Tor | OFFLINE |
| LOCKBIT 3.0 | Tor | OnLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | OFFLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT 3.0 | Tor | ONLINE |
| LOCKBIT | Tor | OFFLINE |
| LOCKFILE | Tor | OFFLINE |
| LORENZ | Tor | ONLINE |
| LV | Tor | OFFLINE |
| LV | Tor | OFFLINE |
| MALLOX | Tor | ONLINE |
| MARKETO | Tor | OFFLINE |
| MARKETO | Tor | OFFLINE |
| MARKETO | Tor | OFFLINE |
| MAZE | Clearnet | OFFLINE |
| MBC | Tor | OFFLINE |
| MEDUSA LOCKER | Tor | ONLINE |
| MEDUSA | Tor | OFFLINE |
| MONTI | Tor | ONLINE |
| NO NAME SPECIFIED | Tor | ONLINE |
| MIDAS/HARON | Tor | OFFLINE |
| MINDWARE | Tor | OFFLINE |
| Moses Staff | Tor | OFFLINE |
| MOUNT LOCKER | Tor | OFFLINE |
| MYDECRYPTOR | Tor | OFFLINE |
| MOISHA | Tor | OFFLINE |
| N3TW0RM | Tor | OFFLINE |
| NEFILIM | Tor | OFFLINE |
| NEMTY | Tor | OFFLINE |
| NETWALKER | Tor | OFFLINE |
| NightSky | Tor | OFFLINE |
| NOKOYAWA | Tor | OFFLINE |
| NOKOYAWA | Tor | ONLINE |
| ONEPERCENT | Tor | OFFLINE |
| PANDORA | Tor | OFFLINE |
| PAY2KEY | Tor | OFFLINE |
| PAYLOAD.BIN | Tor | OFFLINE |
| PLAY | Tor | ONLINE |
| PLAY | Tor | ONLINE |
| PROLOCK | Tor | OFFLINE |
| PROMETHEUS | Tor | OFFLINE |
| PYSA | Tor | OFFLINE |
| QILIN | Tor | ONLINE |
| QILIN | Tor | ONLINE |
| QLOCKER | Tor | OFFLINE |
| QUANTUM | Tor | ONLINE |
| RAGNAR LOCKER | Tor | OFFLINE |
| RAGNAR LOCKER | Tor | ONLINE |
| RAGNAROK | Tor | OFFLINE |
| RAGNAROK | Tor | OFFLINE |
| RANSOM CARTEL | Tor | OFFLINE |
| RANSOM CARTEL | Tor | OFFLINE |
| RANSOMEXX | Tor | ONLINE |
| RANSOM HOUSE | Tor | OFFLINE |
| RANSOM HOUSE | Tor | ONLINE |
| RANZY/AKO | Tor | OFFLINE |
| REDALERT | Tor | OFFLINE |
| REDALERT | Tor | ONLINE |
| RELIC | Tor | OFFLINE |
| REVIL | Tor | OFFLINE |
| REVIL | Tor | ONLINE |
| REVIL | Tor | ONLINE |
| ROBINHOOD | Clearnet | OFFLINE |
| ROOK | Tor | OFFLINE |
| ROYAL | Tor | ONLINE |
| ROYAL | Tor | ONLINE |
| RRANSOM | Tor | ONLINE |
| SEKHMET | Clearnet | OFFLINE |
| SNATCH | Tor | ONLINE |
| SODINOKIBI | Tor | OFFLINE |
| SOLIDBIT | Tor | OFFLINE |
| SPARTA | Tor | OFFLINE |
| SPOOK DATA | Tor | OFFLINE |
| STORMOUS | Tor | OFFLINE |
| SUGAR | Tor | OFFLINE |
| SUNCRYPT | Tor | OFFLINE |
| SUNCRYPT | Tor | ONLINE |
| SynACK | Tor | OFFLINE |
| UNSAFE | Tor | ONLINE |
| VFOKX | Tor | OFFLINE |
| VFOKX | Tor | OFFLINE |
| VICE SOCIETY | Tor | OFFLINE |
| VICE SOCIETY | Tor | ONLINE |
| VICE SOCIETY | Tor | OFFLINE |
| VICE SOCIETY | Tor | ONLINE |
| VICE SOCIETY | Tor | ONLINE |
| VICE SOCIETY | Tor | ONLINE |
| VSOP | Tor | ONLINE |
| X001XS | Tor | ONLINE |
| XING LOCKER | Tor | OFFLINE |
| XINOF | Tor | OFFLINE |
| YANLUOWANG | Tor | OFFLINE |
| ZEON | Tor | OFFLINE |