Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Dark Web
Ransomware victims
12 total victims in the selected window.
Any group
qilin
akira
play
incransom
ransomhub
clop
thegentlemen
dragonforce
lockbit3
safepay
lynx
medusa
dispossessor
lockbit5
nightspire
killsec
hunters
everest
sinobi
rhysida
bianlian
coinbasecartel
blackbasta
0apt
fog
babuk2
devman
8base
handala
funksec
nova
worldleaks
blacksuit
cactus
shinyhunters
spacebears
ransomhouse
silentransomgroup
krybit
sarcoma
cloak
meow
direwolf
interlock
arcusmedia
stormous
eldorado
pear
anubis
genesis
deadlock
apt73
kairos
raworld
chaos
warlock
settra
cicada3301
payoutsking
payload
braincipher
beast
blacklock
storm
threeam
monti
abyss
alphv
flocker
darkvault
gunra
termite
insomnia
global secret group
ailock
auditteam
crypto24
nitrogen
orova
tengu
securotrop
blackshrantac
embargo
j
blacknevas
cmdorganization
dragonransomware
medusalocker
global
crpxo
helldown
metaencryptor
dan0n
panzer
alphalocker
aurora
dark project
frag
l group
bravox
obscura
ciphbit
underground
emperador
kraken
lamashtu
ransomexx
titan
m3rx
morpheus
radar
shadowbyt3$
vect
majinahanashi
zawoo
lapsus$
booba project
hellcat
kazu
section9
cephalus
ralord
trigona
d4rk4rmy
moneymessage
trinity
alp-001
brotherhood
kawa4096
wallstreet
apos
blackbyte
datacarry
madliberator
redransomware
snatch
vexy ransomware
exfilsquad
tridentlocker
unsafe
donutleaks
orion
weyhro
argonauts
benzona
n0n
blackout
doommageddon
icarus
imncrew
teamxxx
black x
crazyhunter
dysphor1a
eclipse
knight
mallox
barracuda
mogilevich
helix
iah6477
qiulong
radiant
skira
vanhelsing
xpl0itrs
bert
blackwater
chort
daixin
arkana
cipherforce
gammax
netrunner
prinzeugen
runsomewares
silent
0day syndicate
bqtlock
donex
dunghill
gdlockersec
kryptos
minteye
valencialeaks
desolator
exitium
fulcrumsec
linkc
ms13089
orca
ransomcortex
satanlockv2
secpo
triple x
bluebox
cry0
d1r
endzone
ethics
Any country
US
DE
CA
GB
IT
FR
IN
BR
ES
AU
JP
MX
CH
TW
AR
SG
TH
AE
TR
NL
IL
SE
BE
CN
MY
CO
ID
AT
KR
PL
HK
ZA
CZ
SA
PE
CL
IE
PH
PT
DK
VN
RO
EG
NO
RU
GR
NZ
UK
FI
PK
HR
EC
VE
HU
JO
IR
KE
LU
NG
BD
DO
SK
TN
United States
BG
CY
OM
MA
CR
PA
QA
UY
GT
PR
LB
PY
BO
LK
NA
KW
SV
JM
DZ
MT
IQ
LV
MM
MN
RS
BH
GE
GH
MU
SI
TT
ZW
BB
BS
BW
CI
LA
LT
MK
SJ
TZ
ZM
BA
BY
EU
MC
UA
UZ
AW
BM
CM
EE
FJ
HN
IS
KH
LY
MD
SD
SN
TV
VG
AD
AF
AM
AO
AZ
DM
ET
GA
LR
MO
NP
PW
QC
Thailand
AG
AI
AL
BZ
KY
MG
ML
MZ
NE
NI
PS
SC
TC
TD
TL
TO
UG
United Arab Emirates
WS
YE
??
BT
ca
CG
cl
CW
DJ
Egypt
FO
Guatemala
GY
HT
in
India
Jamaica
JE
KI
KZ
lk
LS
ME
MR
MS
ND
NJ
Northern Cyprus
NY
PG
RE
Romania
RW
SO
South Korea
SP
Switzerland
SY
TJ
tz
United Kingdom
us
VA
VC
Vietnam
VZ
YT
Any sector
Not Found
Manufacturing
Business Services
Technology
Healthcare
Transportation/Logistics
Financial Services
Agriculture and Food Production
Education
Consumer Services
Construction
Energy
Hospitality and Tourism
Public Sector
Government
Financial
Professional Services
Other
Telecommunication
Retail & E-Commerce
Transportation
Energy & Utilities
Government & Defense
Hospitality
Retail
Manufacturer
Real Estate
Business Services, Technology
Communication
Consumer services
Entertainment
Food and Agriculture
Healtcare
Legal
Real Estate is not on the list, so the answer would be "Not Found".
Real Estate is not on the list you provided. Therefore, the answer would be "Not Found".
Real Estate is not on the provided list, so the answer would be "Not Found".
Technology, Not Found, Education
Last 7 days
Last 30 days
Last 90 days
Last year
All time
Apply filters
Show
10
25
50
Victim
Group
Country
Industry
Size
Status
Posted
Richmont Graduate University
.edu
ailock
US
Education
—
—
Jul 24, 2026
Hokua
ailock
CL
Not Found
—
—
Jul 6, 2026
Showing 11–12 of 12
‹ Prev
Next ›