Intel

Entities

Actors, services, families and pools the Curated band names. Counts are how many claims name each; never a score.

sort by

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Results1–60 of 4,218

malware family
Locky
aka Locky-Odin · Locky-Osiris · Locky-Osiris 2016 · Locky-Osiris 2017
ransomware · 1 source
0 attributions14,911 claims0 relations0 events
malware family
NotNevada
ransomware · 1 source
0 attributions2,807 claims0 relations0 events
malware family
Maui
ransomware · 1 source
0 attributions2,255 claims0 relations0 events
malware family
Razy
ransomware · 1 source
0 attributions1,785 claims0 relations0 events
malware family
Unlabeled
ransomware · 1 source
0 attributions1,560 claims0 relations0 events
malware family
Qlocker
ransomware · 1 source
0 attributions932 claims0 relations0 events
malware family
MedusaLocker
ransomware · 1 source
0 attributions814 claims0 relations0 events
malware family
AES-NI
ransomware · 1 source
0 attributions698 claims0 relations0 events
malware family
WannaCry
aka WanaCry · WanaCrypt · WanaCrypt0r · WannaCrypt · WCry · WCRY · WCrypt
ransomware · 1 source
0 attributions510 claims1 relations0 events
malware family
SynAck
aka Syn Ack
ransomware · 1 source
0 attributions497 claims0 relations0 events
malware family
CryptoTorLocker2015
ransomware · 1 source
0 attributions443 claims0 relations0 events
malware family
File-Locker
ransomware · 1 source
0 attributions443 claims0 relations0 events
malware family
Netwalker (Mailto)
ransomware · 1 source
0 attributions300 claims0 relations0 events
malware family
Conti
ransomware · 1 source
0 attributions236 claims1 relations0 events
malware family
DMALockerv3
ransomware · 1 source
0 attributions167 claims0 relations0 events
malware family
Globe
ransomware · 1 source
0 attributions132 claims0 relations0 events
malware family
NotPetya
aka Diskcoder.C · ExPetr · GoldenEye · Nyetya · Petrwrap
ransomware · 1 source
0 attributions125 claims1 relations0 events
organization
Hydra Market
aka Hydra · Hydra Marketplace
sanction · 1 source
0 attributions117 claims0 relations0 events
malware family
Makop
ransomware · 1 source
0 attributions115 claims0 relations0 events
malware family
Samas-Samsam
aka MIKOPONI.exe · RikiRafael.exe · Samas · SamSam · samsam.exe · SamSam Ransomware · showmehowto.exe
ransomware · 1 source
0 attributions113 claims0 relations0 events
malware family
Fake Globe Ransomware
aka Globe Imposter · GlobeImposter
ransomware · 1 source
0 attributions107 claims0 relations0 events
malware family
Ryuk
ransomware · 1 source
0 attributions94 claims2 relations0 events
malware family
CryptXXX
aka CryptProjectXXX · CryptXXX 2.0
ransomware · 1 source
0 attributions83 claims0 relations0 events
malware family
Predator
ransomware · 1 source
0 attributions68 claims0 relations0 events
pool
AntPool
claims name no abuse
2,193 attributions62 claims0 relations0 events
malware family
CryptoLocker
ransomware · 1 source
0 attributions56 claims0 relations0 events
malware family
Globev3
ransomware · 1 source
0 attributions50 claims0 relations0 events
perpetrator
Wang Yunhe
aka Trafficcarb · Trafficcash · Wang Jack · Wan Jack · Wilson William · Wong Jack · 王云禾
sanction · 1 source
0 attributions46 claims0 relations0 events
malware family
Karakurt
aka Karakurt Lair
ransomware · 1 source
0 attributions45 claims0 relations0 events
organization
Blender.io
aka blenderio · @Blenderio_English · @Blenderio_Russian · @madeamaze_bot
sanction · 1 source
0 attributions45 claims0 relations0 events
perpetrator
Parsarad Behrouz
aka Paeinshahri Behrouz · Parsa Behrouz · پائینشهری بهروز · پارسا بهروز · پارسا راد بهروز
sanction · 1 source
0 attributions44 claims0 relations0 events
threat actor
Storm-1567
aka Akira · GOLD SAHARA · Megazord · PUNK SPIDER
ransomware · 1 source
0 attributions39 claims0 relations0 events
malware family
Jigsaw
aka Cryptohitman · CryptoHitMan · Jigsaw Original
ransomware · 1 source
0 attributions37 claims0 relations0 events
malware family
Cuba
aka COLDDRAW · Fidel
ransomware · 1 source
0 attributions36 claims0 relations0 events
perpetrator
Grimm Matthew Simon
sanction · 1 source
0 attributions36 claims0 relations0 events
malware family
ChupaCabra
ransomware · 1 source
0 attributions32 claims0 relations0 events
malware family
NoobCrypt
ransomware · 1 source
0 attributions32 claims0 relations0 events
malware family
AlbDecryptor
ransomware · 1 source
0 attributions30 claims0 relations0 events
malware family
DeadBolt
ransomware · 1 source
0 attributions30 claims0 relations0 events
perpetrator
Chen Zhi
aka 陈志
sanction · 1 source
0 attributions29 claims0 relations0 events
malware family
TripleM
ransomware · 1 source
0 attributions29 claims0 relations0 events
malware family
CryptConsole
ransomware · 1 source
0 attributions28 claims0 relations0 events
malware family
Tejodes
ransomware · 1 source
0 attributions27 claims0 relations0 events
malware family
Spora
ransomware · 1 source
0 attributions24 claims0 relations0 events
pool
Telco 214
claims name no abuse
0 attributions23 claims0 relations0 events
organization
CHATEX
sanction · 1 source
0 attributions22 claims0 relations0 events
pool
Poolin
claims name no abuse
12 attributions20 claims0 relations0 events
malware family
Egregor
ransomware · 1 source
0 attributions18 claims0 relations0 events
perpetrator
Peijnenburg Alex Adrianus Martinus
aka Peijnenburg Aam · Peijnenburg Alex Adrianus Martin
sanction · 1 source
0 attributions18 claims0 relations0 events
perpetrator
Wu Huihui
aka fast4release · Wakemeupupup
sanction · 1 source
0 attributions17 claims0 relations0 events
malware family
REvil / Sodinokibi
ransomware · 1 source
0 attributions16 claims0 relations0 events
malware family
Xorist
ransomware · 1 source
0 attributions16 claims0 relations0 events
pool
Binance Pool
claims name no abuse
120 attributions14 claims0 relations0 events
malware family
LamdaLocker
ransomware · 1 source
0 attributions14 claims0 relations0 events
malware family
LockBit
aka ABCD ransomware
ransomware · 1 source
0 attributions14 claims0 relations0 events
organization
SUEX OTC, S.R.O.
aka Successful Exchange
sanction · 1 source
0 attributions14 claims0 relations0 events
malware family
Ako
aka MedusaReborn
ransomware · 1 source
0 attributions13 claims0 relations0 events
pool
Polmine
claims name no abuse
0 attributions13 claims0 relations0 events
malware family
Ragnar Locker
aka RagnarLocker
ransomware · 1 source
0 attributions13 claims1 relations0 events
malware family
APT
ransomware · 1 source
0 attributions12 claims0 relations0 events

Entities

Results1–60 of 4,218

Locky

NotNevada

Maui

Razy

Unlabeled

Qlocker

MedusaLocker

AES-NI

WannaCry

SynAck

CryptoTorLocker2015

File-Locker

Netwalker (Mailto)

Conti

DMALockerv3

Globe

NotPetya

Hydra Market

Makop

Samas-Samsam

Fake Globe Ransomware

Ryuk

CryptXXX

Predator

AntPool

CryptoLocker

Globev3

Wang Yunhe

Karakurt

Blender.io

Parsarad Behrouz

Storm-1567

Jigsaw

Cuba

Grimm Matthew Simon

ChupaCabra

NoobCrypt

AlbDecryptor

DeadBolt

Chen Zhi

TripleM

CryptConsole

Tejodes

Spora

Telco 214

CHATEX

Poolin

Egregor

Peijnenburg Alex Adrianus Martinus

Wu Huihui

REvil / Sodinokibi

Xorist

Binance Pool

LamdaLocker

LockBit

SUEX OTC, S.R.O.

Ako

Polmine

Ragnar Locker

APT