Threat Group Cards: A Threat Actor Encyclopedia

All tools which card contains the string *ransomware*

Changed	Name
Tools
	3AM
	Anubis, BankBot, Go_P00t, android.bankbot, android.bankspy
	Apostle
	AtomSilo
	Avaddon
	Babuk Locker, Babuk, Babyk, Vasa Locker
	BadRabbit
	Bart
	BazarBackdoor, BazarLoader, BEERBOT, BazarCall, KEGTAP, Team9Backdoor, bazaloader
	BitPaymer, FriedEx, IEncrypt, wp_encrypt
	Bitsran, SHADYCAT
	BlackCat, ALPHV, ALPHVM, Noberus
	BlackMatter
	Buran, VegaLocker, Vega
	CLAMBLING, Clambling
	Clop, Cl0p
	Comet, Meteor, Stardust
	Conti
	Contopee, WHITEOUT
	CryptoLocker
	CryptoMix, CryptFile2, Zeta, CryptoShield, Azer
	CryptoWall
	CryWiper
	Cuba, COLDDRAW
	DarkSide
	DeathRansom, deathransom, DEATHRANSOM, wacatac
	Defray777, Defray, Defray 2018, Target777, Ransom X, RansomExx, Glushkov
	Diavol
	DistTrack, Shamoon
	DoppelPaymer, Pay OR Grief
	Dridex, Bugat v5
	Egregor
	EKANS, Snake, SNAKEHOSE
	Emotet, Geodo, Heodo
	Erebus
	Fantasy
	FIVEHANDS, Thieflock
	FOXGRABBER
	GameOver Zeus, Peer-to-Peer Zeus, P2P Zeus, GOZ
	GandCrab, GrandCrab
	GlobeImposter, Fake Globe
	Grief, Pay or Grief
	Hades
	HELLOKITTY, HelloKitty, KittyCrypt
	Hermes
	HermeticRansom, PartyTicket, Elections GoRansom, SonicVote
	HUI Loader
	Industrial Spy
	Jaff, Rakhni
	Kelihos, Waledac, Hlux
	KillDisk, Win32/KillDisk.NBI, Win32/KillDisk.NBH, Win32/KillDisk.NBD, Win32/KillDisk.NBC, Win32/KillDisk.NBB
	LimeRAT
	LockBit, ABCD Ransomware, LockBit Black, Syrphid
	LockerGoga
	LockFile
	Locky
	Macaw Locker
	Maze, ChaCha
	MedusaLocker, AKO Doxware, AKO Ransomware, MedusaReborn
	Moneybird
	Munchkin
	NB65
	Nefilim, Nephilim
	Nemty
	NetWalker, MailTo, Koko Ransomware
	Ngrok
	NightSky, Night Sky
	njRAT, Bladabindi, Jorik
	NotPetya, EternalPetya, ExPetr, Pnyetya, Petna, Nyetya, NonPetya, nPetya, Petrwrap, Diskcoder.C, GoldenEye
	NSIS, Nullsoft Scriptable Install System
	Pandora
	Pay2Key, Cobalt
	PayloadBIN
	PCHUNTER
	Philadelphia, Philadephia Ransom
	Phoenix, Phoenix Locker
	PowGoop
	ProLock, PwndLocker
	PyXie, PyXie RAT
	QakBot, QuakBot, QuackBot, Qbot, PinkSlip, Pinkslipbot, Oakboat
	Quant Loader, QuantLoader
	RagnarLocker, Ragnar Locker
	RansomBoggs
	Raspberry Robin, RaspberryRobin, LINK_MSIEXEC, QNAP-Worm
	RCLONE, Rclone
	RedLine, RedLine Stealer
	RockLoader
	Rook
	ROUTERSCAN
	RURansom
	Ryuk
	S3BROWSER
	SamSam, Samas
	ShadowPad Winnti, POISONPLUG.SHADOW, XShellGhost
	Snatch
	Sodinokibi, Sodin, REvil
	SombRAT
	S.O.V.A.
	StrifeWater, StrifeWater RAT
	SunCrypt
	TerraCrypt, PureLocker
	TFlower
	TinyCryptor
	TrickBot, Trickster, The Trick, TheTrick, Totbrick, TrickLoader, TSPY_TRICKLOAD
	Underground
	Vatet
	VHD, VHD Ransomware
	Wadhrama
	WannaCry, WannaCrypt, WannaCryptor, Wcry, WanaCry, WanaCrypt, WanaCrypt0r, Wana Decrypt0r
	WARPRISM
	WastedLoader
	WastedLocker
	WhisperGate, WhisperKill, PAYWIPE
	Xbash
	ZAP
	ZLoader, Terdot, DELoader

116 tools listed

Last database change: 21 April 2025