Ransom-Note Filename Catalog

155 groups · 258 known ransom-note filenames. Useful for detection rules (e.g. file-create monitoring). Click a group to see its filenames.

Policy: HackerFeeds stores only the filename + a sha256 of the filename + its byte length. The actual note text is never fetched from upstream. Use these patterns for detection — never use them to access stolen content.

Groups with published note patterns

#	Group	Note filenames
1	cactus	6
2	blackbasta	5
3	clop	5
4	lockbit	5
5	lockbit2	5
6	lockbit3	5
7	ransomexx	5
8	alphv	4
9	blackbyte	4
10	conti	4
11	doppelpaymer	4
12	interlock	4
13	nightspire	4
14	ransomhub	4
15	akira	3
16	blacklock	3
17	braincipher	3
18	chilelocker	3
19	cloak	3
20	hunters	3
21	nemty	3
22	noescape	3
23	play	3
24	qilin	3
25	ransomhouse	3
26	revil	3
27	tengu	3
28	thegentlemen	3
29	8base	2
30	darkangels	2
31	dataleak	2
32	diavol	2
33	eldorado	2
34	embargo	2
35	fog	2
36	gunra	2
37	hellcat	2
38	hive	2
39	karakurt	2
40	knight	2
41	lorenz	2
42	lynx	2
43	mallox	2
44	medusa	2
45	monti	2
46	nitrogen	2
47	nokoyawa	2
48	noname	2
49	payload	2
50	ragnarlocker	2
51	raworld	2
52	safepay	2
53	warlock	2
54	0apt	1
55	ailock	1
56	ako	1
57	anubis	1
58	auditteam	1
59	aurora	1
60	avaddon	1
61	avoslocker	1
62	aware	1
63	babuk2	1
64	beast	1
65	benzona	1
66	bert	1
67	bianlian	1
68	blackfield	1
69	blackmatter	1
70	blacksuit	1
71	blackwater	1
72	bluelocker	1
73	bluesky	1
74	booba project	1
75	chaos	1
76	cicada3301	1
77	ciphbit	1
78	cryptnet	1
79	crypto24	1
80	cuba	1
81	dagonlocker	1
82	darkbit	1
83	darkside	1
84	datacarry	1
85	devman	1
86	direwolf	1
87	dragonforce	1
88	esxiargs	1
89	everest	1
90	exitium	1
91	flocker	1
92	global	1
93	goddamn ransomwhere	1
94	grief	1
95	hades	1
96	helldown	1
97	icefire	1
98	kairos	1
99	karma	1
100	kraken	1
101	krybit	1
102	kyber	1
103	lamashtu	1
104	lilith	1
105	linkc	1
106	lunalock	1
107	lv	1
108	m3rx	1
109	maze	1
110	medusalocker	1
111	moneymessage	1
112	montage	1
113	morpheus	1
114	mortar	1
115	nblock	1
116	nefilim	1
117	netrunner	1
118	netwalker	1
119	nevada	1
120	obscura	1
121	orova	1
122	payoutsking	1
123	prolock	1
124	prometheus	1
125	qlocker	1
126	ragnarok	1
127	ralord	1
128	rancoz	1
129	ranzy	1
130	redalert	1
131	reynolds	1
132	rhysida	1
133	rook	1
134	royal	1
135	sensayq	1
136	shadow	1
137	shinysp1d3r	1
138	silent	1
139	silentransomgroup	1
140	sinobi	1
141	slug	1
142	snatch	1
143	sugar	1
144	suncrypt	1
145	termite	1
146	tommyleaks	1
147	trinity	1
148	u-bomb	1
149	underground	1
150	vanhelsing	1
151	vect	1
152	vicesociety	1
153	worldleaks	1
154	yanluowang	1
155	zeon	1