Hot

Ransomware Data

Groups, victims & IOCs

Comprehensive ransomware intelligence. Track 100+ groups, monitor victim announcements, and access associated IOCs in real-time.

100+
Groups Tracked
50K+
Victims Logged
Real-time
Updates
2yr
History

Key Features

Everything you need to protect your infrastructure and users

Group Profiles

Detailed profiles of 100+ ransomware groups.

Victim Tracking

Real-time monitoring of leak site announcements.

IOC Database

IPs, domains, and hashes linked to campaigns.

Geographic Data

Victim locations and targeting patterns.

Historical Data

2+ years of ransomware activity data.

Export Options

JSON, CSV, STIX, and API access.

Use Cases

How security teams use this tool

Threat Intelligence

Stay informed on ransomware trends.

Third-Party Risk

Monitor if vendors appear on leak sites.

Incident Response

Identify ransomware variants during incidents.

Research

Analyze ransomware ecosystem patterns.

Frequently Asked Questions

What ransomware data do you track?
Group profiles, victim announcements, TTPs, IOCs (domains, IPs, hashes), and leak site activity.
How many groups do you track?
We track 100+ active and historical ransomware groups with detailed profiles and affiliations.
How quickly do you report new victims?
New victim posts are typically added within minutes of appearing on leak sites.
What format is the data available in?
JSON via API, CSV downloads, STIX format, and our dashboard interface.

Ready to Get Started?

Join thousands of security teams using isMalicious to protect their infrastructure.