Ransomware Darknet websites
You will need the Tor Browser to visit the websites but you should already know that. Constantly updated, last update April 2024. I’m not removing the websites/groups even if they go offline, for historical reasons.
Ransomware groups
| Group | Link |
|---|---|
| 8Base | visit |
| AgainstTheWest | visit |
| Ako | visit |
| Akira | visit |
| AlphaVM/alphv/Blackcat | visit visit visit |
| ank | visit |
| Arvin Club | visit telegram |
| AtomSilo | visit visit |
| AvosLocker | visit |
| Axxes | visit |
| babyduck | visit |
| Babuk | visit |
| bianlian | visit |
| blackbasta | visit |
| BlackByte | visit visit visit |
| Bl4ckt0r | visit (auth: bl@ckt0r:bl@ckt0r) |
| BlackMatter (former Darkside) | visit visit visit |
| Black Shadow | visit telegram |
| Black Suit | visit |
| blue sky | visit |
| Bonaci Group/NoLock | visit |
| Cheers | visit visit |
| CL0P^_- LEAKS | visit |
| CONTI | visit visit |
| Cooming Project | visit |
| Corporate Leaks/Nefilim (Nemty/Karma) | visit visit |
| CryptNet | visit |
| CrossLock | visit |
| Cuba | visit |
| Daixin | visit visit |
| darkangels | visit |
| DarkRace | visit |
| Dark Leak Market | visit visit visit visit |
| DoppelPaymer | visit |
| DotAdmin | visit telegram |
| Dunghill | visit |
| Ech0raix | visit |
| El_Cometa/SynACK | visit |
| ElonMusKnow | visit |
| Entropy | visit |
| Exorcist | visit |
| ep918 | visit |
| Everest | visit |
| Grief (DoppelPaymer/BitPaymer) | visit visit |
| Groove | visit |
| Haron | visit (auth: Chaddadgroup:Chaddadgroup) |
| hello gookie | visit |
| hello kitty | visit |
| HimalayaA | visit |
| Hive | visit visit visit |
| H0lyGh0st | visit |
| Hotarus | visit |
| Karakurt/CRYP70N1C0D3 | visit visit visit |
| Karma Leaks | visit |
| La Piovra | visit |
| Lapsus$/vfokx | visit visit telegram |
| lilith | visit |
| LockBit 2.0 | visit |
| LockData Auction | visit |
| Lolnek | visit |
| Lorenz/it | visit |
| LV | visit visit |
| MalasLocker | visit |
| Marketo | visit visit visit telegram |
| Maze (Sekhmet/Egregor) | visit visit visit |
| MBC | visit |
| MedusaLocker | visit |
| Midas/Haron/Crylock | visit visit |
| mindware | visit |
| Money Message | visit |
| Mount Locker/AstroLocker/AztroTeam/Xing星 | visit visit |
| Nightsky | visit |
| nokoyawa | visit |
| N3tw0rm | visit |
| NoEscape | visit |
| onyx | visit |
| 0mega | visit |
| Pandora | visit |
| Pay2Key | visit telegram |
| Payload.bin | visit |
| Prolock | visit |
| Prometheus/Spook | visit |
| Pysa/Mespinoza | visit |
| Qlocker | visit |
| Quantum | visit visit |
| RA Group | visit |
| Ragnar_Locker | visit |
| Ragnarok | visit visit |
| Rancoz | visit |
| RAMP | visit |
| ranion | visit |
| RansomEXX/Defray777 | visit |
| RansomHouse | visit telegram |
| Ransomware | visit |
| RanzyLeak/Ako | visit |
| REvil | visit visit visit |
| Rhysida | visit |
| Rook/x001xs | visit visit |
| rransom | visit |
| Sabbath/54bb47h | visit |
| Snatch | visit |
| solidbit | visit |
| Spook | visit |
| Stormous | visit |
| suncrypt | visit |
| SynACK | visit |
| Trigona | visit |
| Vice Society | visit visit |
| XING Team | visit |
| Xinof | visit |
| Yanluowang | visit |
| Zeon | visit |
Ransomware markets
| Market | Link |
|---|---|
| BlackByte Auction | visit |
| Dark Leak Market | visit |
| Dread | visit |
| Exploit | visit |
| Marketo | visit |
| RAMP | visit |
| Verified | visit |
| XSS | visit |
Use the lists for good, not for evil. Just kidding, use them for whatever you want.
permalink http://sizeof.cat/post/ransomware-darknet-websites/
created January 3, 2022
updated April 20, 2024
words 372
tags #ransomware, #darknet, #tor, #lists
