You will need the Tor Browser to visit the websites but you should already know that.
Ransomware group sites
| Group | Link |
|---|---|
| 54bb47h | visit |
| AlphaVM | visit |
| Arvin Club | visit |
| AtomSilo | visit |
| AvosLocker | visit |
| Babuk | visit |
| BlackByte | visit |
| Bl4ckt0r | visit |
| BlackMatter (former Darkside?) | visit |
| Black Shadow | visit |
| Bonaci Group | visit |
| CL0P | visit |
| CONTI | visit |
| CoomingProject | visit |
| DoppelPaymer | visit |
| Entropy | visit |
| Grief | visit |
| Groove | visit |
| Haron | visit (auth: Chaddadgroup:Chaddadgroup) |
| Hive | visit |
| Hotarus | visit |
| Karma Leaks | visit |
| LockBit 2.0 | visit |
| LockData Auction | visit |
| Lorenz | visit |
| LV BLOG | visit |
| MBC | visit |
| Midas | visit |
| Pay2Key | visit |
| Payload.bin | visit |
| Pysa | visit |
| Quantum | visit |
| Ragnar_Locker | visit |
| Ragnarok | visit |
| RAMP | visit |
| RansomEXX | visit |
| REvil | visit |
| Rook | visit |
| Snatch | visit |
| Spook | visit |
| SynACK | visit |
| XING Team | visit |
Ransomware market sites
| Market | Link |
|---|---|
| BlackByte Auction | visit |
| Marketo | visit |
| Dark Leak Market | visit |
Use the lists for good, not for evil. Just kidding, use them for whatever you want.