Explore authentic ransomware notes left by Ransomware Groups. These notes contain contact methods and payment instructions for victims. A valuable resource for CTI, DFIR, and security professionals.
Initial Release: 25th of May 2025 13th of June 2025
3AM 8Base AbyssLocker AiLock Akira Ako Alpha ALPHV (JX34) ALPHV 1 ALPHV 2 ALPHV 3 Antefrigus Arcus Avaddon AvosLocker Azov Beast Bert BianLian BigLock BitPaymer v1 BitPaymer v2 BitRansomware BlackBasta 1 BlackBasta 2 BlackBasta 3 BlackBasta 4 BlackBasta Instructions BlackByte Readme BlackByte Readme 2 BlackByte [rand] BlackByte v2 BlackLock BlackMatter BlackSnake BlackSuit BlueSky BrainCipher Restore BrainCipher [id] Cactus 1 Cactus 2 Cactus 3 Cactus 4 Cactus 5 Cactus 6 Cartel Cerber HBE8 Cerber Cerber CRBR Cerber ReadMe3 ChileLocker 1 ChileLocker 2 ChileLocker 3 Cicada3301 Cloak Cloak Nov 2024 Cloak Oct 2024 Clop Cleo Clop 1 Clop 2 Conti 1 Conti 2 Conti 3 Conti 4 CryptNet CryptoMix CryptXXX [rand] CTBlocker Cuba CyberEx DarkAngels DarkBit DarkSide Datacarry DataF DataLeak File Stolen DataLeak Start Leak DeadByDawn Dharma Diavol 1 Diavol 2 DoppelPaymer 1 DoppelPaymer 2 DoppelPaymer 3 DoppelPaymer 4 DragonForce [rand] Embargo 1 Embargo 2 Fog 1 Fog 2 GandCrab Decrypt GandCrab Grief GwisinLocker Hades Hellcat Helldown [id] Hive Decrypt Hive Hunters Contact 1 Hunters Contact 2 Hunters ReadMe IceFire INC 1 INC 2 INC 3 INC 4 IndustrialSpy Interlock OpenMe Interlock First Read Interlock ReadMe Interlock Read This One First Kairos Karakurt 1 Karakurt Alert Karma Knight Restore 1 Knight Restore 2 Krypt Kuiper Lambda Lapiovra Lilith LockBit [id] LockBit [rand] LockBit 2 LockBit 3 Locky Lorenz LV Lynx 1 Lynx 2 Magniber Makop Mallox Recovery Mallox Backup Maze Medusa 1 Medusa 2 MoneyMessage Monti Bidon Monti Morpheus Naga Nefilim Nemesis Nemty v1 Nemty v16 Nemty v25 Netwalker Nevada NightSpire 1 NightSpire 2 Nitrogen NoEscape 1 NoEscape NoID 1 NoEscape NoID 2 Nokoyawa Nokoyawa NovaGroup [id] NullBulge [rand] Phobos Play ReadMe Play ReadMe2 Play Prometheus Qilin DtMXQFOCos Qilin [rand] Qlocker RagnarLocker Notes RagnarLocker 1 Ragnarok RaLord Rancoz RansomEXX What Happened RansomEXX Why Encrypted RansomEXX Notext RansomEXX 1 RansomEXX 2 RansomHouse Restore RansomHouse White Rabbit RansomHub [id] 1 RansomHub [id] 2 RansomHub [id] 3 RansomHub [id] 4 Ranzy RaWorld Warning RedAlert REvil 1 REvil 2 REvil 3 Rhysida Risen ($) Risen Rook Royal RTMLocker Ryuk SafePay SafePay ASCII SatanCD ScareCrow SchoolBoys SensayQ [id] Shadow [rand] Slug Excel Snatch STOP Sugar Synapse [id] TargetCompany TeslaCrypt Thor TommyLeaks Trinity U-Bomb Underground VanHelsing Vice Society Vohuk WALocker WastedLocker Weaxor Info 1 Weaxor Info 2 Xorist YanluoWang Zeon
Export as TXT Copy to Clipboard Close
