Ransomware.live is originally a fork of ransomwatch and inspired by ransomlook. Ransomware.live is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites and published them.

🔭 Sources

Internal

You can find all ransomware victims in json format here.

Usage

./ransomcmd.py --help
    
usage: ransomcmd.py [-h] {scrape,parse,generate,screenshot,status,search,rss,infostealer,tools} ...

positional arguments:
  {scrape,parse,generate,screenshot,status,search,rss,infostealer,tools}
    scrape              Scrape ransomware DLS sites (use -h/--help for available options)
    parse               Parse ransomware DLS sites (use -h/--help for available options)
    generate            Generate Ransomware.live site
    screenshot          Generate screenshot for ransomware sites (use -h/--help for available options)
    status              Show the status of ransomware.live
    search              Search victim in database (use -h/--help for available options)
    rss                 Generate RSS feeds
    infostealer         Query Hudsonrock database (need -d/--domain <domain>)
    tools               Tools for Ransomware.live (use -h/--help for available options)

options:
  -h, --help            show this help message and exit

External

• ransomwhe.re for the crypto wallet information
• Zscaler ThreatLabz for the ransomware notes
• Valéry Rieß-Marchive for the information about cyberattacks and the negotiation chats
• Malpedia for the Ransomware description
• CERT Orange Cyberdefense for the Ransomware map

⚙️ API

An API is available for ransomware.live's data

You can find more information about it : here

Sources are available on github : https://github.com/JMousqueton/api.ransomware.live

❤️ Support

If you want to support ransomware.live :

🗞️ They talk about ransomware.live

Find articles about ransomware.live

👓 Feed RSS

You can follow ransomware.live from its RSS Feed

📜 License

ransomwatch is licensed under unlicense.org

👨🏼‍💼 About me

I'm Julien Mousqueton

• I'm CTO in Cyber Security 🛡
• I'm a lecturer 🎓 in Cyber Security @ Ecole 2600 🏴‍☠️
• I'm a blogger ✍🏻 at julien.io in french 🇫🇷

You can find more in my resume in English (also available in French / aussi disponible en français)

👉🏻 I'm currently open to job offers and excited to explore new opportunities. Don't hesitate to get in touch.

📫 Contact me

You can contact me using the following form.

🤩 Credits

• Josh Highet for the original ransomwatch project.
• Ransomlook for ideas of new features included in Ransomware.live.
• Valéry Rieß-Marchive for ideas and his involvement in the cyber community.