Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Dark Web
Ransomware victims
3 total victims in the selected window.
Any group
d1r
qilin
akira
play
incransom
thegentlemen
clop
ransomhub
dragonforce
lockbit3
safepay
lynx
medusa
lockbit5
dispossessor
nightspire
killsec
hunters
everest
sinobi
rhysida
bianlian
coinbasecartel
blackbasta
0apt
fog
babuk2
devman
8base
handala
funksec
nova
worldleaks
blacksuit
shinyhunters
cactus
spacebears
krybit
silentransomgroup
ransomhouse
sarcoma
cloak
meow
direwolf
interlock
pear
arcusmedia
stormous
eldorado
anubis
genesis
deadlock
apt73
kairos
raworld
chaos
settra
storm
braincipher
warlock
cicada3301
payoutsking
payload
threeam
beast
blacklock
monti
abyss
alphv
flocker
darkvault
gunra
termite
auditteam
insomnia
global secret group
ailock
crypto24
nitrogen
orova
medusalocker
tengu
securotrop
blackshrantac
embargo
j
blacknevas
cmdorganization
dragonransomware
metaencryptor
global
crpxo
helldown
panzer
emperador
lamashtu
dan0n
aurora
alphalocker
booba project
dark project
frag
m3rx
l group
wallstreet
bravox
obscura
ciphbit
titan
underground
kraken
zawoo
morpheus
ransomexx
radar
shadowbyt3$
vect
majinahanashi
lapsus$
hellcat
kazu
section9
cephalus
ralord
trigona
vexy ransomware
d4rk4rmy
moneymessage
n0n
trinity
alp-001
brotherhood
kawa4096
apos
blackbyte
datacarry
madliberator
redransomware
snatch
exfilsquad
tridentlocker
unsafe
donutleaks
doommageddon
orion
weyhro
argonauts
barracuda
benzona
blackout
icarus
imncrew
teamxxx
black x
eclipse
crazyhunter
dysphor1a
knight
mallox
netrunner
mogilevich
gammax
helix
iah6477
qiulong
radiant
skira
vanhelsing
xpl0itrs
bert
blackwater
chort
daixin
arkana
cipherforce
prinzeugen
runsomewares
silent
0day syndicate
bqtlock
donex
dunghill
endzone
gdlockersec
kryptos
minteye
spirals
valencialeaks
cry0
desolator
exitium
fulcrumsec
linkc
ms13089
orca
ransomcortex
satanlockv2
secpo
triple x
blacklocks
bluebox
Any country
US
DE
CA
GB
IT
FR
BR
IN
ES
AU
JP
MX
CH
TW
AR
TH
AE
SG
TR
SE
NL
IL
BE
CO
MY
CN
ID
AT
KR
PL
HK
ZA
CZ
SA
PE
PH
PT
CL
IE
VN
DK
RO
EG
NO
RU
GR
NZ
UK
FI
PK
EC
HR
VE
HU
United States
JO
KE
BD
BG
IR
LU
NG
OM
DO
SK
TN
CY
MA
CR
PA
PR
QA
UY
GT
LB
PY
BO
LK
NA
SV
KW
JM
DZ
MT
GE
IQ
LV
MM
MN
RS
BH
GH
LT
MU
SI
TT
TZ
ZW
BB
BS
BW
CI
LA
MK
SJ
ZM
BA
BY
EU
MC
SN
UA
UZ
AW
BM
CM
EE
FJ
HN
IS
KH
LY
MD
MO
SD
TV
VG
AD
AF
AG
AM
AO
AZ
BZ
DM
ET
GA
LR
NP
PW
QC
Thailand
TL
UG
AI
AL
KY
KZ
MG
ML
MZ
NE
NI
PS
SC
TC
TD
TO
United Arab Emirates
WS
YE
??
BT
ca
CG
cl
CW
DJ
Egypt
FO
Guatemala
GY
HT
in
India
Jamaica
JE
KI
lk
LS
ME
MR
MS
ND
NJ
Northern Cyprus
NY
PG
RE
Romania
RW
SO
South Korea
SP
Switzerland
SY
TJ
tz
United Kingdom
us
VA
VC
Vietnam
VZ
YT
Any sector
Not Found
Manufacturing
Business Services
Technology
Healthcare
Transportation/Logistics
Financial Services
Agriculture and Food Production
Education
Consumer Services
Construction
Energy
Hospitality and Tourism
Public Sector
Government
Financial
Professional Services
Other
Retail & E-Commerce
Telecommunication
Transportation
Energy & Utilities
Government & Defense
Hospitality
Retail
Manufacturer
Real Estate
Business Services, Technology
Communication
Consumer services
Entertainment
Food and Agriculture
Healtcare
Legal
Real Estate is not on the list, so the answer would be "Not Found".
Real Estate is not on the list you provided. Therefore, the answer would be "Not Found".
Real Estate is not on the provided list, so the answer would be "Not Found".
Technology, Not Found, Education
Last 7 days
Last 30 days
Last 90 days
Last year
All time
Apply filters
Show
10
25
50
Victim
Group
Country
Industry
Size
Status
Posted
Bosch
d1r
DE
Manufacturing
—
listed
Jul 13, 2026
ARM
d1r
GB
Technology
—
listed
Jul 13, 2026
Synopsys
d1r
US
Technology
—
listed
Jul 13, 2026
Showing 1–3 of 3
‹ Prev
Next ›