Ransomware Intelligence

Sources & Disclaimer

Disclaimer

This dashboard aggregates and presents information relating to ransomware activity drawn from SOCRadar's own proprietary research and telemetry, combined with publicly available external sources, including CTI.fyi, ransomware.live, and RansomLook. The publicly available data is collected from sources such as threat-actor leak sites, open-source intelligence feeds, and security community reporting, all of which are accessible to the general public at the time of collection.

This information is republished and analysed for legitimate cybersecurity, situational-awareness, and defensive research purposes only. Surfacing details of ransomware campaigns and claimed victims supports the wider security community in understanding the threat landscape, assessing risk, and improving defensive measures. Inclusion of any organisation, entity, or claim on this dashboard does not constitute an allegation of fact by SOCRadar, nor does it imply any endorsement, affiliation, or verification of statements made by threat actors.

Data presented here may be incomplete, inaccurate, outdated, or unverified. Claims originating from threat-actor sources are reproduced as found and have not necessarily been independently confirmed. SOCRadar makes no warranties, express or implied, as to the accuracy, completeness, or reliability of this information and accepts no liability for any loss or damage arising from its use. Nothing on this dashboard constitutes legal, security, or professional advice.

All trademarks, names, and data referenced remain the property of their respective owners. If you are an affected party and wish to raise a concern or request a correction, please contact SOCRadar at socradar.io/contact.