Find victim claims, groups and linked actor profiles
Search by organization, domain or ransomware group. Use filters for group, country and sector, then open linked actor profiles where attribution is available.
- • Type LockBit, Qilin, a victim name or a domain.
- • Click a top group to filter the claims list.
- • Actor-linked groups show an Actor profile link.
Claim trend
Daily victim listings from materialized stats
Top countries
Top sectors
Claimed victims
Public-safe summaries from indexed ransomware claim data.
Top ransomware groups
Threat intelligence surfaces
Connect ransomware claims to the rest of CTI
Ransomware group and victim-claim views connect to actor profiles, sectors, regions, IOCs, source reporting, affected products, CVEs, malware, and detection context.
Current source-backed reporting, severity scoring, entities, IOCs, products, and detection context.
Wallet drainers, approval phishing, scam-address intelligence, bridge incidents, and protocol exploits.
Normalized domains, IPs, URLs, file hashes, crypto wallets, contracts, and related threat evidence.
Known exploited vulnerabilities, CVSS, exploit signals, affected products, remediation context, and source evidence.
Software, vendors, services, Web3 protocols, and bridges linked to threats, CVEs, malware, and IOCs.
Public-safe ransomware group, victim-claim, sector, region, and activity pivots without leak URLs.