Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Dark Web
Ransomware victims
44 total victims in the selected window.
Any group
qilin
akira
play
thegentlemen
incransom
clop
ransomhub
dragonforce
lockbit3
safepay
lynx
medusa
lockbit5
nightspire
dispossessor
killsec
hunters
everest
sinobi
rhysida
bianlian
coinbasecartel
blackbasta
0apt
fog
babuk2
devman
8base
handala
funksec
nova
worldleaks
silentransomgroup
blacksuit
shinyhunters
spacebears
cactus
krybit
n0n
ransomhouse
sarcoma
cloak
interlock
meow
direwolf
pear
arcusmedia
stormous
eldorado
anubis
deadlock
genesis
apt73
kairos
raworld
settra
chaos
storm
braincipher
warlock
cicada3301
payoutsking
payload
threeam
beast
blacklock
monti
abyss
alphv
flocker
auditteam
orova
darkvault
termite
gunra
global secret group
insomnia
emperador
medusalocker
nitrogen
ailock
crypto24
lamashtu
tengu
panzer
wallstreet
aurora
securotrop
blackshrantac
embargo
j
metaencryptor
blacknevas
cmdorganization
dragonransomware
global
booba project
crpxo
dark project
helldown
dan0n
bravox
alphalocker
frag
m3rx
l group
obscura
ciphbit
titan
underground
kraken
zawoo
majinahanashi
morpheus
ransomexx
vexy ransomware
radar
shadowbyt3$
vect
lapsus$
eclipse
hellcat
kazu
section9
cephalus
ralord
trigona
d4rk4rmy
moneymessage
trinity
alp-001
brotherhood
doommageddon
helix
kawa4096
apos
blackbyte
datacarry
iah6477
madliberator
redransomware
snatch
exfilsquad
tridentlocker
unsafe
barracuda
black x
donutleaks
orion
weyhro
argonauts
benzona
blackout
icarus
imncrew
netrunner
teamxxx
byod
crazyhunter
dysphor1a
hyflock
knight
mallox
umbra
mogilevich
gammax
qiulong
radiant
redact
skira
the seven deadly sins
vanhelsing
xpl0itrs
bert
blackwater
chort
daixin
runsomewares
vypr
arkana
cipherforce
endzone
fulcrumsec
prinzeugen
silent
0day syndicate
bqtlock
cry0
donex
dunghill
exitium
gdlockersec
kryptos
minteye
scarlettgroup
spirals
valencialeaks
desolator
linkc
ms13089
Any country
US
DE
CA
GB
IT
FR
BR
IN
ES
AU
JP
MX
CH
TW
AR
SG
TH
AE
TR
SE
NL
IL
BE
KR
MY
CO
CN
ID
AT
PL
HK
ZA
CZ
PE
SA
CL
IE
PT
PH
VN
EG
DK
RO
NO
RU
GR
NZ
UK
FI
PK
EC
HR
VE
HU
United States
NG
BD
BG
IR
JO
KE
OM
TN
LU
MA
SK
DO
CY
CR
QA
UY
PA
PR
GT
LB
PY
BO
LK
KW
NA
SV
DZ
JM
MN
MT
TT
GE
IQ
LV
MM
RS
BH
GH
LT
MU
SI
TZ
ZW
BB
BS
BW
CI
LA
MK
SJ
ZM
BA
BY
EE
ET
EU
MC
SN
UA
UZ
AD
AW
BM
BZ
CM
FJ
GA
HN
IS
KH
LY
MD
MO
SD
TV
VG
AF
AG
AM
AO
AZ
DM
KZ
LR
NP
PW
QC
Thailand
TL
UG
AI
AL
HT
KY
MG
ML
MZ
NE
NI
PS
RE
SC
TC
TD
TO
United Arab Emirates
WS
YE
??
Australia
BT
ca
CG
cl
CW
DJ
Egypt
FO
Guatemala
GY
in
India
Jamaica
JE
KI
LI
lk
LS
ME
MR
MS
ND
NJ
Northern Cyprus
NY
PG
Romania
RW
SO
South Korea
SP
Switzerland
SY
TJ
tz
United Kingdom
us
USA
VA
VC
Vietnam
VU
VZ
YT
Any sector
Not Found
Manufacturing
Technology
Business Services
Healthcare
Transportation/Logistics
Financial Services
Agriculture and Food Production
Education
Consumer Services
Construction
Energy
Hospitality and Tourism
Public Sector
Professional Services
Government
Financial
Other
Retail & E-Commerce
Transportation
Telecommunication
Energy & Utilities
Government & Defense
Hospitality
Retail
Manufacturer
Real Estate
Business Services, Technology
Communication
Consumer services
Entertainment
Food and Agriculture
Healtcare
Legal
Real Estate is not on the list, so the answer would be "Not Found".
Real Estate is not on the list you provided. Therefore, the answer would be "Not Found".
Real Estate is not on the provided list, so the answer would be "Not Found".
Technology, Not Found, Education
Last 7 days
Last 30 days
Last 90 days
Last year
All time
Apply filters
Show
10
25
50
Victim
Group
Country
Industry
Size
Status
Posted
PI***al
auditteam
CO
Financial Services
—
listed
Aug 27, 2026
Demidov Steel Group
.ru
auditteam
RU
Manufacturing
—
listed
Aug 18, 2026
ma***up
auditteam
RU
Not Found
—
listed
Aug 25, 2026
De***up
.ru
auditteam
RU
Not Found
—
listed
Aug 18, 2026
Showing 41–44 of 44
‹ Prev
Next ›