Explore authentic ransomware notes left by Ransomware Groups. These notes contain contact methods and payment instructions for victims. A valuable resource for CTI, DFIR, and security professionals.Last Updated: 2025/10/18
3AM 8Base AbyssLocker AiLock Akira 1 Akira 2 Ako Alpha ALPHV (JX34) ALPHV 1 ALPHV 2 ALPHV 3 Antefrigus Arcus Avaddon AvosLocker Azov Beast Bert BianLian BigLock BitPaymer v1 BitPaymer v2 BitRansomware BlackBasta 1 BlackBasta 2 BlackBasta 3 BlackBasta 4 BlackBasta Instructions BlackByte Readme BlackByte Readme 2 BlackByte [rand] BlackByte v2 BlackLock BlackMatter BlackSnake BlackSuit BlueSky
Bytesfromheaven BrainCipher Restore BrainCipher [id] BrainCipher 2 Cactus 1 Cactus 2 Cactus 3 Cactus 4 Cactus 5 Cactus 6 Cartel Cerber HBE8 Cerber Cerber CRBR Cerber ReadMe3 ChileLocker 1 ChileLocker 2 ChileLocker 3 Cicada3301 Ciphbit Cloak Cloak Nov 2024 Cloak Oct 2024 Clop Cleo Clop 1 Clop 2 Conti 1 Conti 2 Conti 3 Conti 4 CryptNet CryptoMix CryptXXX [rand] CTBlocker Cuba CyberEx DarkAngels 1 DarkAngels 2
DarkBit DarkSide Datacarry DataF DataLeak File Stolen DataLeak Start Leak DeadByDawn Dharma Diavol 1 Diavol 2 Direwolf DoppelPaymer 1 DoppelPaymer 2 DoppelPaymer 3 DoppelPaymer 4 DragonForce [rand] Embargo 1 Embargo 2 Fog 1 Fog 2 GandCrab Decrypt GandCrab GLOBAL
Grief GwisinLocker Hades Hellcat Helldown [id] Hive Decrypt Hive Hunters Contact 1 Hunters Contact 2 Hunters ReadMe IceFire INC 1 INC 2 INC 3 INC 4 IndustrialSpy Interlock OpenMe Interlock First Read Interlock ReadMe Interlock Read This One First Kairos Karakurt 1 Karakurt Alert Karma KaWaLocker (Standard) KaWaLocker (ASCII) Knight Restore 1 Knight Restore 2 Krypt
Krypt 2 Kuiper Kyber Lambda Lapiovra Lilith LockBit [id] LockBit [rand] LockBit 2 LockBit 3 LockBit 5.0 Locky Lorenz LV Lynx 1 Lynx 2 Magniber Makop Mallox Recovery Mallox Backup Maze Medusa 1 Medusa 2 MoneyMessage Monti Bidon Monti Morpheus Naga Nefilim Nemesis Nemty v1 Nemty v16 Nemty v25 Netwalker Nevada NightSpire 1 NightSpire 2 NightSpire 3 Nitrogen NoEscape 1 NoEscape NoID 1 NoEscape NoID 2 Nokoyawa Nokoyawa NovaGroup [id] NullBulge [rand] Phobos Play ReadMe Play ReadMe2 Play Prometheus Qilin DtMXQFOCos Qilin [rand] Qlocker RagnarLocker Notes RagnarLocker 1 Ragnarok RaLord Rancoz RansomEXX What Happened RansomEXX Why Encrypted RansomEXX Notext RansomEXX 1 RansomEXX 2
RansomHouse How To Restore Your Files
RansomHouse Restore RansomHouse White Rabbit RansomHub [id] 1 RansomHub [id] 2 RansomHub [id] 3 RansomHub [id] 4 Ranzy RaWorld 1 RAWorld 2 RedAlert REvil 1 REvil 2 REvil 3 Rhysida Risen ($) Risen Rook Royal RTMLocker Ryuk SafePay SafePay ASCII SatanCD ScareCrow SchoolBoys SensayQ [id] Shadow [rand] Sinobi Slug Excel Snatch STOP Sugar Synapse [id] TargetCompany TENGU
TeslaCrypt The Gentlemen Thor TommyLeaks Trinity U-Bomb Underground VanHelsing Vice Society Vohuk WALocker Warlock WastedLocker Weaxor Info 1 Weaxor Info 2
White Lock
xLeaks Xorist YanluoWang Zeon
Export as TXT Copy to Clipboard Close
Data provided by DarkWebInformer and ThreatLabz
