Skip to main content
Ransomware Group

Ramp

RAMP (Russian Anonymous Marketplace) was a Russian-speaking dark web forum founded in 2021 that served as a central marketplace and recruitment hub for ransomware operators, affiliates, and initial access brokers — not a ransomware group itself but the backbone of the RaaS ecosystem; it was seized by the FBI in January 2026.

Known victims0

Threat Level

LOW

Known Infrastructure

The following Tor hidden services have been associated with this group:

  • wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion
  • This Site Has Been Seized
  • ramp4u5iz4xx75vmt6nk5xfrs5mrmtokzszqxhhkjqlk7pbwykaz7zid.onion

Warning: These are malicious sites. Do not visit without proper security measures.

0

Check If You’re Affected

Search our database to see if your organization appears in Ramp’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request