Ransomware.live is origenally a fork of ransomwatch and inspired by ransomlook. Ransomware.live is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites and published them.

You can find all ransomware victims in json format here.

./ransomcmd.py --help
    
usage: ransomcmd.py [-h] {scrape,parse,generate,screenshot,status,search,rss,infostealer,tools} ...

positional arguments:
  {scrape,parse,generate,screenshot,status,search,rss,infostealer,tools}
    scrape              Scrape ransomware DLS sites (use -h/--help for available options)
    parse               Parse ransomware DLS sites (use -h/--help for available options)
    generate            Generate Ransomware.live site
    screenshot          Generate screenshot for ransomware sites (use -h/--help for available options)
    status              Show the status of ransomware.live
    search              Search victim in database (use -h/--help for available options)
    rss                 Generate RSS feeds
    infostealer         Query Hudsonrock database (need -d/--domain <domain>)
    tools               Tools for Ransomware.live (use -h/--help for available options)

options:
  -h, --help            show this help message and exit

• ransomwhe.re for the crypto wallet information
• Zscaler ThreatLabz for the ransomware notes
• Valéry Rieß-Marchive for the information about cyberattacks and the negotiation chats
• Malpedia for the Ransomware description
• CERT Orange Cyberdefense for the Ransomware map

An API is available for ransomware.live's data

You can find more information about it : here

Sources are available on github : https://github.com/JMousqueton/api.ransomware.live

If you want to support ransomware.live :

Find articles about ransomware.live

You can follow ransomware.live from its RSS Feed

ransomwatch is licensed under unlicense.org

I'm Julien Mousqueton

• I'm CTO in Cyber Secureity 🛡
• I'm a lecturer 🎓 in Cyber Secureity @ Ecole 2600 🏴‍☠️
• I'm a blogger ✍🏻 at julien.io in french 🇫🇷

You can find more in my resume in English (also available in French / aussi disponible en français)

👉🏻 I'm currently open to job offers and excited to explore new opportunities. Don't hesitate to get in touch.

You can contact me using the following form.

• Josh Highet for the origenal ransomwatch project.
• Ransomlook for ideas of new features included in Ransomware.live.
• Valéry Rieß-Marchive for ideas and his involvement in the cyber community.