Ransomware Darknet websites

January 3, 2022    Article    369 words    2 mins read

You will need the Tor Browser to visit the websites but you should already know that. Constantly updated, last update June 2023. I’m not removing the websites/groups even if they go offline, for historical reasons.

Ransomware groups

GroupLink
8Basevisit
AgainstTheWestvisit
Akovisit
Akiravisit
AlphaVM/alphv/Blackcatvisit
visit
visit
ankvisit
Arvin Clubvisit
telegram
AtomSilovisit
visit
AvosLockervisit
Axxesvisit
babyduckvisit
Babukvisit
bianlianvisit
blackbastavisit
BlackBytevisit
visit
visit
Bl4ckt0rvisit (auth: bl@ckt0r:bl@ckt0r)
BlackMatter (former Darkside)visit
visit
visit
Black Shadowvisit
telegram
Black Suitvisit
blue skyvisit
Bonaci Group/NoLockvisit
Cheersvisit
visit
CL0P^_- LEAKSvisit
CONTIvisit
visit
Cooming Projectvisit
Corporate Leaks/Nefilim (Nemty/Karma)visit
visit
CryptNetvisit
CrossLockvisit
Cubavisit
Daixinvisit
visit
darkangelsvisit
DarkRacevisit
Dark Leak Marketvisit
visit
visit
visit
DoppelPaymervisit
DotAdminvisit
telegram
Dunghillvisit
Ech0raixvisit
El_Cometa/SynACKvisit
ElonMusKnowvisit
Entropyvisit
Exorcistvisit
ep918visit
Everestvisit
Grief (DoppelPaymer/BitPaymer)visit
visit
Groovevisit
Haronvisit (auth: Chaddadgroup:Chaddadgroup)
hello kittyvisit
HimalayaAvisit
Hivevisit
visit
visit
H0lyGh0stvisit
Hotarusvisit
Karakurt/CRYP70N1C0D3visit
visit
visit
Karma Leaksvisit
La Piovravisit
Lapsus$/vfokxvisit
visit
telegram
lilithvisit
LockBit 2.0visit
LockData Auctionvisit
Lolnekvisit
Lorenz/itvisit
LVvisit
visit
MalasLockervisit
Marketovisit
visit
visit
telegram
Maze (Sekhmet/Egregor)visit
visit
visit
MBCvisit
MedusaLockervisit
Midas/Haron/Crylockvisit
visit
mindwarevisit
Money Messagevisit
Mount Locker/AstroLocker/AztroTeam/Xing星visit
visit
Nightskyvisit
nokoyawavisit
N3tw0rmvisit
NoEscapevisit
onyxvisit
0megavisit
Pandoravisit
Pay2Keyvisit
telegram
Payload.binvisit
Prolockvisit
Prometheus/Spookvisit
Pysa/Mespinozavisit
Qlockervisit
Quantumvisit
visit
RA Groupvisit
Ragnar_Lockervisit
Ragnarokvisit
visit
Rancozvisit
RAMPvisit
ranionvisit
RansomEXX/Defray777visit
RansomHousevisit
telegram
Ransomwarevisit
RanzyLeak/Akovisit
REvilvisit
visit
visit
Rhysidavisit
Rook/x001xsvisit
visit
rransomvisit
Sabbath/54bb47hvisit
Snatchvisit
solidbitvisit
Spookvisit
Stormousvisit
suncryptvisit
SynACKvisit
Trigonavisit
Vice Societyvisit
visit
XING Teamvisit
Xinofvisit
Yanluowangvisit
Zeonvisit

Ransomware markets

MarketLink
BlackByte Auctionvisit
Dark Leak Marketvisit
Dreadvisit
Exploitvisit
Marketovisit
RAMPvisit
Verifiedvisit
XSSvisit

Use the lists for good, not for evil. Just kidding, use them for whatever you want.