Hot

Ransomware Data

Groups, victims & IOCs

Comprehensive ransomware intelligence. Track 100+ groups, monitor victim announcements, and access associated IOCs in real-time.

Latest Ransomware Activity

Recent victims published by ransomware groups on their leak sites.

Live Data Sample
System Online
Karlin Foods
Targeted by akira
5/22/2026
tkgm.gov.tr
Targeted by apt73
5/22/2026
minsa.com.mx
Targeted by apt73
5/22/2026
Create Free Account for Full Access

No credit card required. Instant access to full datasets.

100+

Groups Tracked

50K+

Victims Logged

Real-time

Updates

2yr

History

Capabilities

Key Features

Everything you need to protect your infrastructure and users

Group Profiles

Detailed profiles of 100+ ransomware groups.

Victim Tracking

Real-time monitoring of leak site announcements.

IOC Database

IPs, domains, and hashes linked to campaigns.

Geographic Data

Victim locations and targeting patterns.

Historical Data

2+ years of ransomware activity data.

Export Options

JSON, CSV, STIX, and API access.

Applications

Use Cases

How security teams use this tool

Threat Intelligence

Stay informed on ransomware trends.

Third-Party Risk

Monitor if vendors appear on leak sites.

Incident Response

Identify ransomware variants during incidents.

Research

Analyze ransomware ecosystem patterns.

Support

Frequently Asked Questions

What ransomware data do you track?
Group profiles, victim announcements, TTPs, IOCs (domains, IPs, hashes), and leak site activity.
How many groups do you track?
We track 100+ active and historical ransomware groups with detailed profiles and affiliations.
How quickly do you report new victims?
New victim posts are typically added within minutes of appearing on leak sites.
What format is the data available in?
JSON via API, CSV downloads, STIX format, and our dashboard interface.
Get Started

Ready to Get Started?

Join thousands of security teams using isMalicious to protect their infrastructure.