Explore authentic ransomware notes left by Ransomware Groups. These notes contain contact methods and payment instructions for victims. A valuable resource for CTI, DFIR, security professionals or just anyone that loves cybersecurity.2026/01/21 Obscura
3AM
8Base
AbyssLocker
AiLock
Akira 1
Akira 2
Ako
Alpha
ALPHV (JX34)
ALPHV 1
ALPHV 2
ALPHV 3
Antefrigus
Arcus
Avaddon
AvosLocker
Aware
Azov
Beast
Bert
BianLian
BigLock
BitPaymer v1
BitPaymer v2
BitRansomware
BlackBasta 1
BlackBasta 2
BlackBasta 3
BlackBasta 4
BlackBasta Instructions
BlackByte Readme
BlackByte Readme 2
BlackByte [rand]
BlackByte v2
BlackLock
BlackMatter
BlackSnake
BlackSuit
BlueSky
Bytesfromheaven
BrainCipher Restore
BrainCipher [id]
BrainCipher 2
Cactus 1
Cactus 2
Cactus 3
Cactus 4
Cactus 5
Cactus 6
Cartel
Cerber HBE8
Cerber
Cerber CRBR
Cerber ReadMe3
ChileLocker 1
ChileLocker 2
ChileLocker 3
Cicada3301
Ciphbit
Clearwater
Cloak
Cloak Nov 2024
Cloak Oct 2024
Clop Cleo
Clop 1
Clop 2
Conti 1
Conti 2
Conti 3
Conti 4
CryptNet
Crypto24
CryptoMix
CryptXXX [rand]
CTBlocker
Cuba
CyberEx
DarkAngels 1
DarkAngels 2
DarkBit
DarkSide
Datacarry
DataF
DataLeak File Stolen
DataLeak Start Leak
DeadByDawn
Devman 2.1
Dharma
Diavol 1
Diavol 2
Direwolf
DoppelPaymer 1
DoppelPaymer 2
DoppelPaymer 3
DoppelPaymer 4
DragonForce [rand]
Embargo 1
Embargo 2
Evolution
Fog 1
Fog 2
GandCrab Decrypt
GandCrab
GLOBAL
Grief
Gunra
GwisinLocker
Hades
Hellcat
Helldown [id]
Hive Decrypt
Hive
Hunters Contact 1
Hunters Contact 2
Hunters ReadMe
IceFire
INC 1
INC 2
INC 3
INC 4
IndustrialSpy
Interlock OpenMe
Interlock First Read
Interlock ReadMe
Interlock Read This One First
Kairos
Karakurt 1
Karakurt Alert
Karma
KaWaLocker (Standard)
KaWaLocker (ASCII)
Knight Restore 1
Knight Restore 2
Kraken
Krypt
Krypt 2
Kuiper
Kyber
Lambda
Lapiovra
Lilith
LockBit [id]
LockBit [rand]
LockBit 2
LockBit 3
LockBit 5.0
Locky
Lorenz
LV
Lynx 1
Lynx 2
Magniber
Makop
Mallox Recovery
Mallox Backup
Maze
Medusa 1
Medusa 2
MoneyMessage
Monti Bidon
Monti
Morpheus
Naga
Nefilim
Nemesis
Nemty v1
Nemty v16
Nemty v25
Netwalker
Nevada
NightSpire 1
NightSpire 2
NightSpire 3
Nitrogen
NoEscape 1
NoEscape NoID 1
NoEscape NoID 2
Nokoyawa
Nokoyawa
NovaGroup [id]
NullBulge [rand]
Obscura
Phobos
Play ReadMe
Play ReadMe2
Play
Prometheus
Punisher
Qilin DtMXQFOCos
Qilin [rand]
Qlocker
Quicklock
RagnarLocker Notes
RagnarLocker 1
Ragnarok
RaLord
Rancoz
RansomEXX What Happened
RansomEXX Why Encrypted
RansomEXX Notext
RansomEXX 1
RansomEXX 2
RansomHouse How To Restore Your Files
RansomHouse Restore
RansomHouse White Rabbit
RansomHub [id] 1
RansomHub [id] 2
RansomHub [id] 3
RansomHub [id] 4
Ranzy
RaWorld 1
RAWorld 2
RedAlert
REvil 1
REvil 2
REvil 3
Rhysida
Risen ($)
Risen
Rook
Royal
RTMLocker
Ryuk
SafePay
SafePay ASCII
SatanCD
ScareCrow
SchoolBoys
SensayQ [id]
Shadow [rand]
Sinobi
Slug Excel
Snatch
STOP
Sugar
Synapse [id]
TargetCompany
TENGU
TeslaCrypt
Tengu
The Gentlemen
Thor
TommyLeaks
Trinity
U-Bomb
Underground
VanHelsing
Vice Society
Vohuk
WALocker
Warlock
Warlock 2
WastedLocker
Weaxor Info 1
Weaxor Info 2
White Lock
xLeaks
Xorist
YanluoWang
Zeon
Data provided by Dark Web Informer and ThreatLabz
Export as TXT
Copy to Clipboard
Close
