R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/snatch

snatch

Inactive

Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.

142
Victims
5
Sites

Known Leak Sites

hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onionDLS
snatch.pressDLS
snatchteam.topDLS
snatchteam.ccDLS
snatchnews.topDLS

Victims (142)

Live
Neovia
snatchFR
UK government
snatchGB
The Royal Family of Great Britain
snatchGB
Miki Travel Limited
snatchGB
Retirement Line
snatchGB
Butler, Lavanceau & Sober
snatchUS
Dörr Group
snatchDE
Seven Seas Group
snatchAE
HSPG & Associates
snatchUS
Frencken
snatchMY
Hawbaker Engineering
snatchUS
US government (private data) +Rothschild&Rockefeller
snatchUS
US government (private data)
snatchUS
Charm Sciences
snatchUS
Malabar Gold & Diamonds
snatchIN
Banco Promerica
snatchCR
Kraft Foods
snatch
Spaulding Clinical
snatch
Jerry Pate Energy (hack from Saltmarsh Financial Advisors)
snatch
Maldives Ports Limited
snatchMV
Montachusett Regional Vocational Technical School District
snatchUS
Museum für Naturkunde
snatch
ALVImedica
snatch
Kologik
snatch
Tyson Foods
snatch

Top Targeted Countries

Unknown80
United States28
United Kingdom6
Canada5
India4

Profile

:
:

Activity

Total victims142
Countries affected18
Last seen