Ransom-Note Filename Catalog

152 groups · 254 known ransom-note filenames. Useful for detection rules (e.g. file-create monitoring). Click a group to see its filenames.

Policy: HackerFeeds stores only the filename + a sha256 of the filename + its byte length. The actual note text is never fetched from upstream. Use these patterns for detection — never use them to access stolen content.

Groups with published note patterns

#	Group	Note filenames
1	cactus	6
2	blackbasta	5
3	lockbit	5
4	lockbit2	5
5	lockbit3	5
6	ransomexx	5
7	alphv	4
8	blackbyte	4
9	clop	4
10	conti	4
11	doppelpaymer	4
12	interlock	4
13	nightspire	4
14	ransomhub	4
15	akira	3
16	blacklock	3
17	braincipher	3
18	chilelocker	3
19	cloak	3
20	hunters	3
21	nemty	3
22	noescape	3
23	play	3
24	qilin	3
25	ransomhouse	3
26	revil	3
27	tengu	3
28	thegentlemen	3
29	8base	2
30	darkangels	2
31	dataleak	2
32	diavol	2
33	eldorado	2
34	embargo	2
35	fog	2
36	gunra	2
37	hellcat	2
38	hive	2
39	karakurt	2
40	knight	2
41	lorenz	2
42	lynx	2
43	mallox	2
44	medusa	2
45	monti	2
46	nitrogen	2
47	nokoyawa	2
48	noname	2
49	payload	2
50	ragnarlocker	2
51	raworld	2
52	safepay	2
53	warlock	2
54	0apt	1
55	ailock	1
56	ako	1
57	auditteam	1
58	aurora	1
59	avaddon	1
60	avoslocker	1
61	aware	1
62	babuk2	1
63	beast	1
64	benzona	1
65	bert	1
66	bianlian	1
67	blackfield	1
68	blackmatter	1
69	blacksuit	1
70	blackwater	1
71	bluelocker	1
72	bluesky	1
73	booba project	1
74	chaos	1
75	cicada3301	1
76	ciphbit	1
77	cryptnet	1
78	crypto24	1
79	cuba	1
80	dagonlocker	1
81	darkbit	1
82	darkside	1
83	datacarry	1
84	devman	1
85	direwolf	1
86	dragonforce	1
87	esxiargs	1
88	everest	1
89	exitium	1
90	flocker	1
91	global	1
92	goddamn ransomwhere	1
93	grief	1
94	hades	1
95	helldown	1
96	icefire	1
97	kairos	1
98	karma	1
99	kraken	1
100	krybit	1
101	kyber	1
102	lamashtu	1
103	lilith	1
104	linkc	1
105	lunalock	1
106	lv	1
107	m3rx	1
108	maze	1
109	medusalocker	1
110	moneymessage	1
111	morpheus	1
112	mortar	1
113	nblock	1
114	nefilim	1
115	netrunner	1
116	netwalker	1
117	nevada	1
118	obscura	1
119	orova	1
120	payoutsking	1
121	prolock	1
122	prometheus	1
123	qlocker	1
124	ragnarok	1
125	ralord	1
126	rancoz	1
127	ranzy	1
128	redalert	1
129	reynolds	1
130	rhysida	1
131	rook	1
132	royal	1
133	sensayq	1
134	shadow	1
135	shinysp1d3r	1
136	silent	1
137	sinobi	1
138	slug	1
139	snatch	1
140	sugar	1
141	suncrypt	1
142	termite	1
143	tommyleaks	1
144	trinity	1
145	u-bomb	1
146	underground	1
147	vanhelsing	1
148	vect	1
149	vicesociety	1
150	worldleaks	1
151	yanluowang	1
152	zeon	1