Address

14dpmsn9rmdcS4dKD4GeqY2dYY6pwu4nVV

off-chain

Annotated before this key was seen on-chain. Facts will attach when it first appears.

Chain

facts from the index · observations computed by extractors

No tx history until the address is funded.

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Ryukransomwarepayment addressRyukmalware family
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Ryuk · url https://ransomwhe.re/#address/14dpmsn9rmdcS4dKD4GeqY2dYY6pwu4nVV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2437btcintel:annotations:2437@v2 sha256:eb07edd7fd8d430e
confidencetrusted provider · 50

MITRE ATT&CK Enterpriserecords thatFIN6usesRyuk
fetch —sha256 dc1639caa5501d72
rel_143btcintel:relations:143@v1 sha256:e6d2ed1c130fe2f4
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatWIZARD SPIDERusesRyuk
fetch —sha256 dc1639caa5501d72
rel_585btcintel:relations:585@v1 sha256:2029c656ae7a4d24
confidenceauthority data · 60

A proposal becomes a draft a human reviews; nothing is published on its own.

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

computedNo community notes yet. Notes published to public relays with a bitcoin subject appear here, the ones posted from btcintel included.