Ransomware Group Tracker

Live dark web monitoring across 90 threat actor groups. Status updated continuously.

90
Groups Monitored
89
Currently Active
1
Offline / Seized
16,000+
Victims Tracked
Last updated: 05 March 2026 03:00 UTC  |  Data sources: ransomware.live, ransomwatch, deepdarkCTI, Binary Response dark web monitoring
Group Status .onion / URL Victims Notes
lockbit5 ACTIVE http://lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb… 4
sinobi ACTIVE http://sinobi6ftrg27d6g4sjdt65malds6cfptlnjyw52rsk…
lockbit3_fs ACTIVE http://lockbit7z37ntefjdbjextn6tmdkry4j546ejnru5ce… 2,145
lynx ACTIVE http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyz… 242
rhysida ACTIVE http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdf… 209
play ACTIVE http://mbrlkbtq5jonaqkurjwmxftytyn2ethqvbxfu4rgjbk… 884
nightspire ACTIVE http://a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq3… 6
dragonforce ACTIVE http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwa… 119
threeam ACTIVE http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp… 55
nova ACTIVE http://novavdivko2zvtrvtllnq45lxhba2rfzp76qigb4nrl…
shinyhunters ACTIVE https://breachforums.hn/ 309
interlock ACTIVE http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzf… 4
akira ACTIVE https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2ko… 357
alphalocker ACTIVE http://mydatae2d63il5oaxxangwnid5loq2qmtsol2ozr6vt… 12
atomsilo ACTIVE http://npmh5ahrgakbniuntyc7io4adm6ietbdbuejrfonowq… 4
handala ACTIVE https://handala-hack.to/ 84
incransom ACTIVE http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzs… 275
killsec ACTIVE http://ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcu… 156
ragnarlocker ACTIVE http://rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3i… 123
vanirgroup ACTIVE http://6xdpj3sb5kekvq5ulym5qqmzsv6ektjgvpmajns3qra… 3
weyhro ACTIVE https://weyhro.hk/leaks/
chaos ACTIVE http://hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b…
worldleaks ACTIVE https://worldleaksartrjm3c6vasllvgacbi5u3mgzkluehr…
pear ACTIVE http://peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6uj…
obscura ACTIVE http://obscurad3aphckihv7wptdxvdnl5emma6t3vikcf3c5…
blackshrantac ACTIVE http://b2ykcy2gcug4gnccm6hnrb5xapnresmyjjqgvhafayp…
benzona ACTIVE http://benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54…
tridentlocker ACTIVE http://tridentfrdy6jydwywfx4vx422vnto7pktao2gyx2qd…
payload ACTIVE http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucb… 29
kittykatkrew ACTIVE http://jzdonx6ak2swiitotgajdfh3wjpvyunpi3hatte343d…
sarcoma ACTIVE http://sarcomawmawlhov7o5mdhz4eszxxlkyaoiyiy2b5iwx… 25
underground ACTIVE http://47glxkuxyayqrvugfumgsblrdagvrah7gttfscgzn56… 23 ioc - hash : 0a08d9b027457da99725968eb4566eb836a7d503219ad5690f851caecabce93d
qilin ACTIVE http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbc… 234
ransomexx ACTIVE http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx… 61
0mega ACTIVE http://0mega.cc 7
abyss ACTIVE http://3ev4metjirohtdpshsqlkrqcmxq6zu3d7obrdhglpy5… 80
blackout ACTIVE http://black3gnkizshuynieigw6ejgpblb53mpasftzd6pyd… 10
blacksuit ACTIVE http://weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmn… 176
cactus ACTIVE http://sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpf… 372
cloak ACTIVE http://cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny… 38
clop ACTIVE http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7r… 476
cryp70n1c0d3 ACTIVE http://7k4yyskpz3rxq5nyokf6ztbpywzbjtdfanweup3skct… 11 not a ransomware group, also ref 7k4y[...]7eid.onion/documents.html
daixin ACTIVE http://7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu… 20
dread ACTIVE http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7ji… marketplace - not a ransomware group
embargo ACTIVE http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mv… 26
everest ACTIVE http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawoj… 238
hunters ACTIVE https://huntersinternational.org/ 309
karakurt ACTIVE https://karaleaks.com 74
kelvinsecurity ACTIVE https://kelvinsecteamcyber.wixsite.com/my-site/ite… 89 not a ransomware group
lockbit3 ACTIVE http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjln… 2,168
malas ACTIVE http://malas2urovbyyavjzaezkt5ohljvyd5lt7vv7mnsgbf… 4
medusa ACTIVE http://xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxi… 181
moneymessage ACTIVE http://blogvl7tjyjvsfthobttze52w36wwiz34hrfcmorgvd… 22 hash : bbdac308d2b15a4724de7919bf8e9ffa713dea60ae3a482417c44c60012a654b
ransomhouse ACTIVE http://zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qh… 155
robinhood ACTIVE https://robinhoodleaks.tumblr.com 1
spacebears ACTIVE http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb… 73
toufan ACTIVE https://toufanleaks.org
werewolves ACTIVE https://weerwolven.biz 83
ContFR ACTIVE http://zprxx7sfc26rufggreanowmme5qqouqegr2efnko6er…
kairos ACTIVE http://nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5… 39
termite ACTIVE http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cd… 24
safepay ACTIVE http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2yn… 2
funksec ACTIVE http://funkxxkovrk7ctnggbjnthdajav4ggex53k6m2x3esj…
kraken ACTIVE http://krakenccj3wr23452a4ibkbkuph4d6soyx2xgjoogtu…
anubis ACTIVE http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2… 2
secp0 ACTIVE http://secponewsxgrlnirowclps2kllzaotaf5w2bsvktdnz…
crypto24 ACTIVE http://j5o5y2feotmhvr7cbcp2j2ewayv5mn5zenl3joqwx67…
zerolockersec ACTIVE http://ghfuviaplse6nbeowu7ghhid5hdowutbwbrv77aqgwc…
SilentRansomGroup ACTIVE https://business-data-leaks.com/
direwolf ACTIVE http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmet…
datacarry ACTIVE http://dcarryhaih5oldidg3tbqwnde4lxljytnpvberrwgj2…
warlock ACTIVE http://warlockhga5iw3t54ps5iytlilf7hlvxy7kwrkidspn…
satanlockv2 ACTIVE http://tzhwmgguyxrg6q3tu4q3gvopcjynrhw6ryx2bdl5ghi…
payoutsking ACTIVE https://payoutsgn7cy6uliwevdqspncjpfxpmzgirwl2au65…
securotrop ACTIVE http://securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjs…
beast ACTIVE http://beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufq… 1
thegentlemen ACTIVE http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43… 9
radar ACTIVE http://4q5tsu5o3msmv4am4dfhupwhzlyg7wv3lpswbvbhcrk…
coinbasecartel ACTIVE http://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4…
kyber ACTIVE http://kyblogtz6k3jtxnjjvluee5ec4g3zcnvyvbgsnq5thu…
genesis ACTIVE http://genesis6ixpb5mcy4kudybtw5op2wqlrkocfogbnenz…
tengu ACTIVE http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mv… 3
kazu ACTIVE http://6czlbd2jfiy6765fbnbnzuwuqocg57ebvp3tbm35kib…
orion ACTIVE http://cjfntkj5qeizxowuy3srceg7zo6namc3kfeor7pfn6b…
cry0 ACTIVE http://cryoblogedawivdcknyd4jsjxkrx3xrqqltxla6wwjj…
insomnia ACTIVE http://i62huw7ve22rpyw6lnq3kmfump2dmsg4xpveec3ere7… 1
reynolds ACTIVE http://bs2tlg32pfjwmclm22cyngqmoo24cdlhfxzbruwrdax…
lapsus$ ACTIVE https://lapsus.cz/ 10
AiLock ACTIVE http://dhnsppqjaaa22lsqxl2tfhji4ca43743kubltnodvsf… 18
dispossessor OFFLINE https://dispossessor.com 28

Has your organisation appeared on a ransomware leak site?

Binary Response provides immediate incident response, dark web monitoring, and ransomware negotiation services.

Contact Us Now   Dark Web Monitoring