Ransomware Darknet websites
You will need the Tor Browser to visit the websites but you should already know that. Constantly updated (last update, September 2022).
Ransomware group sites
| Group | Link |
|---|---|
| AgainstTheWest | visit |
| Ako | visit |
| AlphaVM/alphv/Blackcat | visit visit visit |
| ank | visit |
| Arvin Club | visit telegram |
| AtomSilo | visit visit |
| AvosLocker | visit |
| Axxes | visit |
| babyduck | visit |
| Babuk | visit |
| bianlian | visit |
| blackbasta | visit |
| BlackByte | visit visit visit |
| Bl4ckt0r | visit (auth: bl@ckt0r:bl@ckt0r) |
| BlackMatter (former Darkside) | visit visit visit |
| Black Shadow | visit telegram |
| blue sky | visit |
| Bonaci Group/NoLock | visit |
| Cheers | visit visit |
| CL0P/Here | visit |
| CONTI | visit visit |
| Cooming Project | visit |
| Corporate Leaks/Nefilim (Nemty/Karma) | visit visit |
| Cuba | visit |
| Daixin | visit visit |
| darkangels | visit |
| Dark Leak Market | visit visit visit visit |
| DoppelPaymer | visit |
| DotAdmin | visit telegram |
| Ech0raix | visit |
| El_Cometa/SynACK | visit |
| ElonMusKnow | visit |
| Entropy | visit |
| Exorcist | visit |
| ep918 | visit |
| Everest | visit |
| Grief (DoppelPaymer/BitPaymer) | visit visit |
| Groove | visit |
| Haron | visit (auth: Chaddadgroup:Chaddadgroup) |
| hello kitty | visit |
| HimalayaA | visit |
| Hive | visit visit visit |
| H0lyGh0st | visit |
| Hotarus | visit |
| Karakurt/CRYP70N1C0D3 | visit visit visit |
| Karma Leaks | visit |
| Lapsus$/vfokx | visit visit telegram |
| lilith | visit |
| LockBit 2.0 | visit |
| LockData Auction | visit |
| Lolnek | visit |
| Lorenz/it | visit |
| LV | visit visit |
| Marketo | visit visit visit telegram |
| Maze (Sekhmet/Egregor) | visit visit visit |
| MBC | visit |
| MedusaLocker | visit |
| Midas/Haron/Crylock | visit visit |
| mindware | visit |
| Mount Locker/AstroLocker/AztroTeam/Xing星 | visit visit |
| Nightsky | visit |
| nokoyawa | visit |
| N3tw0rm | visit |
| onyx | visit |
| 0mega | visit |
| Pandora | visit |
| Pay2Key | visit telegram |
| Payload.bin | visit |
| Prolock | visit |
| Prometheus/Spook | visit |
| Pysa/Mespinoza | visit |
| Qlocker | visit |
| Quantum | visit visit |
| Ragnar_Locker | visit |
| Ragnarok | visit visit |
| RAMP | visit |
| ranion | visit |
| RansomEXX/Defray777 | visit |
| ransomhouse | visit telegram |
| Ransomware | visit |
| RanzyLeak/Ako | visit |
| REvil | visit visit visit |
| Rook/x001xs | visit visit |
| rransom | visit |
| Sabbath/54bb47h | visit |
| Snatch | visit |
| solidbit | visit |
| Spook | visit |
| Stormous | visit |
| suncrypt | visit |
| SynACK | visit |
| Vice Society | visit visit |
| XING Team | visit |
| Xinof | visit |
| Yanluowang | visit |
| Zeon | visit |
Ransomware market sites
| Market | Link |
|---|---|
| BlackByte Auction | visit |
| Dark Leak Market | visit |
| Dread | visit |
| Exploit | visit |
| Marketo | visit |
| RAMP | visit |
| Verified | visit |
| XSS | visit |
Use the lists for good, not for evil. Just kidding, use them for whatever you want.
author
words 323
license GPLv3
created Monday, January 3, 2022
updated Thursday, September 15, 2022
tags #ransomware, #darknet, #tor