Ransom-Note Filename Catalog

145 groups · 246 known ransom-note filenames. Useful for detection rules (e.g. file-create monitoring). Click a group to see its filenames.

Policy: HackerFeeds stores only the filename + a sha256 of the filename + its byte length. The actual note text is never fetched from upstream. Use these patterns for detection — never use them to access stolen content.

Groups with published note patterns

#	Group	Note filenames
1	cactus	6
2	blackbasta	5
3	lockbit	5
4	lockbit2	5
5	lockbit3	5
6	ransomexx	5
7	alphv	4
8	blackbyte	4
9	clop	4
10	conti	4
11	doppelpaymer	4
12	interlock	4
13	nightspire	4
14	ransomhub	4
15	akira	3
16	blacklock	3
17	braincipher	3
18	chilelocker	3
19	cloak	3
20	hunters	3
21	nemty	3
22	noescape	3
23	play	3
24	qilin	3
25	ransomhouse	3
26	revil	3
27	tengu	3
28	8base	2
29	darkangels	2
30	dataleak	2
31	diavol	2
32	eldorado	2
33	embargo	2
34	fog	2
35	gunra	2
36	hellcat	2
37	hive	2
38	karakurt	2
39	knight	2
40	lorenz	2
41	lynx	2
42	mallox	2
43	medusa	2
44	monti	2
45	nitrogen	2
46	nokoyawa	2
47	noname	2
48	payload	2
49	ragnarlocker	2
50	raworld	2
51	safepay	2
52	thegentlemen	2
53	warlock	2
54	0apt	1
55	ailock	1
56	ako	1
57	auditteam	1
58	aurora	1
59	avaddon	1
60	avoslocker	1
61	aware	1
62	babuk2	1
63	beast	1
64	benzona	1
65	bert	1
66	bianlian	1
67	blackmatter	1
68	blacksuit	1
69	blackwater	1
70	bluelocker	1
71	bluesky	1
72	chaos	1
73	cicada3301	1
74	ciphbit	1
75	cryptnet	1
76	crypto24	1
77	cuba	1
78	dagonlocker	1
79	darkbit	1
80	darkside	1
81	datacarry	1
82	devman	1
83	direwolf	1
84	dragonforce	1
85	esxiargs	1
86	everest	1
87	exitium	1
88	flocker	1
89	global	1
90	grief	1
91	hades	1
92	helldown	1
93	icefire	1
94	kairos	1
95	karma	1
96	kraken	1
97	krybit	1
98	kyber	1
99	lamashtu	1
100	lilith	1
101	linkc	1
102	lunalock	1
103	lv	1
104	m3rx	1
105	maze	1
106	medusalocker	1
107	moneymessage	1
108	morpheus	1
109	nefilim	1
110	netrunner	1
111	netwalker	1
112	nevada	1
113	obscura	1
114	payoutsking	1
115	prolock	1
116	prometheus	1
117	qlocker	1
118	ragnarok	1
119	ralord	1
120	rancoz	1
121	ranzy	1
122	redalert	1
123	reynolds	1
124	rhysida	1
125	rook	1
126	royal	1
127	sensayq	1
128	shadow	1
129	shinysp1d3r	1
130	silent	1
131	sinobi	1
132	slug	1
133	snatch	1
134	sugar	1
135	suncrypt	1
136	termite	1
137	trinity	1
138	u-bomb	1
139	underground	1
140	vanhelsing	1
141	vect	1
142	vicesociety	1
143	worldleaks	1
144	yanluowang	1
145	zeon	1