Ransomware families, wallets & delivery IoCs
🔄 Pivot:📁 Ransomware
Malware
Ransomware
APT / Targeted
Nation-State
Trojan / Banker
Infostealer
Loader / Dropper
RAT
C2 / Beacon
Botnet
Cryptominer
Backdoor / Webshell
Spyware
Wiper
Phishing
Exploit / CVE
Scanner / Recon
DDoS
Tor / Dark Web
Proxy / VPN
Spam / Malspam
Crypto
Sanctions
Organized Crime
Fraud / Scam
Threat Hunting
Total Ransomware
0
New (7d)
0
Types
0
This theater matches on attribution signals (actor, malware family, auto-assigned tags). If it looks empty, run the Auto-Tag Engine and Resolve Everything to populate them, then reload.
30-Day Trend
Type Mix
Top Ransomware Indicators Export
| Indicator | Type | Category | Sightings | Threat | Actions |
|---|---|---|---|---|---|
| No Ransomware indicators yet. | |||||
Ransomware Resources
↗ No More Ransom (decryptors) — Free decryptors + Crypto Sheriff ↗ ID Ransomware — Identify family from note/sample ↗ Ransomware.live — Groups, victims, negotiation notes (live API) ↗ Ransomwhere — Crowdsourced ransom payment tracking ↗ Emsisoft Decryptors — Free decryption tools ↗ Ransom note samples — ThreatLabz ransom-note corpus ↗ RansomLook — Leak-site + group tracking ↗ RansomFeed — Claims feed / statistics ↗ VX-Underground — Samples & threat-actor archives ↗ CISA #StopRansomware — Advisories + reportingAI Skills & Automation
🧠 Identify the ransomware family from a note or extension
🧠 Summarize a group's TTPs and known decryptors
🧠 Draft victim-notification + preservation steps
🧠 Map observed IOCs to ATT&CK techniques
🔍 Pivot & investigate
🏹 Related theaters & actors
🧩 Advanced Capabilities
🔐 Detection & sharing
📜 Playbook — Ransomware response
- Direction — frame the requirement for Ransomware: what decision does this support, by when?
- Collection — triage the 0 Ransomware indicators, corroborate across sources, and action them; capture provenance and observe OPSEC.
- Processing — normalize, de-duplicate and enrich the collected data.
- Analysis — correlate against local holdings; apply ACH; assign confidence.
- Dissemination — open a case, draft a report, share via STIX/MISP.
- Feedback — set an alert rule / watchlist to monitor for change.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports