R
Ransomwhere.org
Live MapLatest VictimsGroupsPaymentsTTPsIdentify
NewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Identify Ransomware

Find if a decryption tool exists for the ransomware that hit you. Search by family name, or upload samples to external identification services.

ID Ransomware

Upload a ransom note or encrypted file sample to identify the ransomware strain. Run by MalwareHunterTeam.

Open ID Ransomware →

No More Ransom

Europol-led initiative with 180+ free decryption tools. Check if your ransomware has a known decryptor.

Browse Decryptors →

Hit by Ransomware? Do This Now

1

Isolate

Disconnect infected systems from the network immediately.

2

Preserve

Do NOT delete encrypted files or ransom notes — they help with identification.

3

Identify

Use ID Ransomware above to determine the strain.

4

Report

File a report with CISA (US), Action Fraud (UK), or local CERT.

Known Decryptors (20)

Curated subset — NoMoreRansom has 180+ tools. See full catalog →

GandCrab

GandCrab Decryptor — by Bitdefender

Get Decryptor →

REvil/Sodinokibi

REvil Decryptor — by Bitdefender

Get Decryptor →

Shade/Troldesh

ShadeDecryptor — by Kaspersky

Get Decryptor →

Jigsaw

Jigsaw Decryptor — by Emsisoft

Get Decryptor →

TeslaCrypt

TeslaCrypt Decryptor — by ESET

Get Decryptor →

Dharma/CrySiS

Rakhni Decryptor — by Kaspersky

Get Decryptor →

STOP/Djvu

STOP Djvu Decryptor — by Emsisoft

Get Decryptor →

Maze

Maze Decryptor — by Emsisoft

Get Decryptor →

Avaddon

Avaddon Decryptor — by No More Ransom

Get Decryptor →

Babuk

Babuk Decryptor — by Avast

Get Decryptor →

TargetCompany

TargetCompany Decryptor — by Avast

Get Decryptor →

AtomSilo/LockFile

AtomSilo Decryptor — by Avast

Get Decryptor →

Fonix/XONIF

Fonix Decryptor — by Kaspersky

Get Decryptor →

Hive

Hive Decryptor — by KISA

Get Decryptor →

Yanluowang

Yanluowang Decryptor — by Kaspersky

Get Decryptor →

Conti

Conti Decryptor (leaked) — by Community

Get Decryptor →

BlackByte

BlackByte Decryptor — by Trustwave

Get Decryptor →

Lorenz

Lorenz Decryptor — by Tesorion

Get Decryptor →

Ragnarok

Ragnarok Decryptor — by Self-released

Get Decryptor →

SynAck

SynAck Decryptor — by Self-released

Get Decryptor →

Additional Resources

→CISA StopRansomware→Europol No More Ransom→Chainabuse (report wallets)→abuse.ch ThreatFox