Ransomware notes
From extortion.wiki, the ransomware documentary archive
A static, family-organized view of ransom demands and instructions collected by Zscaler ThreatLabz. This corpus is browsed, counted, and searched separately from ransomware negotiation records.
Search ransomware notes
Search uses normalized plain text for excerpts. The exact archived source remains available on every note page, with URLs and markup kept inert.
Archive overview
| Ransomware families | 221 | Archived notes | 332 |
|---|---|---|---|
| Supported files | 332 | Skipped or malformed files | 1 |
| Supported formats | .hta (6), .htm (1), .html (16), .log (2), .me (1), .readme_to_restore (2), .txt (302), .txtt (1), .xt (1) | ||
| Dataset snapshot | Jun 26, 2026, 10:27 PM | Synchronized | Jul 22, 2026, 11:47 AM |
| Upstream commit | 2bbf5b4ecda84837c4a71af1a99c6821920f051a | ||
Alphabetical family index
A
- Abysslocker (2 notes)
- Ailock (1 notes)
- Akira (3 notes)
- Ako (1 notes)
- Alpha (1 notes)
- ALPHV (4 notes)
- Antefrigus (1 notes)
- Arcus (1 notes)
- Atomsilo (1 notes)
- Auditteam (1 notes)
- Aurora (1 notes)
- Avaddon (1 notes)
- Avoslocker (1 notes)
- Aware (1 notes)
- Azov (1 notes)
B
- Beast (1 notes)
- Bert (1 notes)
- Bianlian (1 notes)
- Biglock (1 notes)
- Bitpaymer (2 notes)
- Bitransomware (1 notes)
- Blackbasta (5 notes)
- Blackbyte (4 notes)
- Blackfield (1 notes)
- Blackhunt (1 notes)
- Blacklock (3 notes)
- Blackmatter (1 notes)
- Blacksnake (1 notes)
- Blacksuit (1 notes)
- Blackwater (1 notes)
- Bluesky (1 notes)
- Bluewindgroup (1 notes)
- Booba (1 notes)
- Braincipher (3 notes)
- Bytesfromheaven (1 notes)
C
- Cactus (6 notes)
- Cartel (1 notes)
- Cerber (4 notes)
- Chaos (1 notes)
- Chilelocker (3 notes)
- Cicada3301 (1 notes)
- Ciphbit (1 notes)
- Clearwater (2 notes)
- Cloak (3 notes)
- Clop (4 notes)
- Conti (4 notes)
- Cryptnet (1 notes)
- Crypto24 (1 notes)
- Cryptomix (1 notes)
- Cryptxxx (1 notes)
- Crytox (1 notes)
- Ctblocker (1 notes)
- Cuba (1 notes)
- Cyberex (1 notes)
D
- Dagonlocker (1 notes)
- Darkangels (2 notes)
- Darkbit (1 notes)
- Darkpower (0 notes)
- Darkside (1 notes)
- Datacarry (1 notes)
- Dataf (1 notes)
- Dataleak (2 notes)
- Deadbydawn (1 notes)
- Dennisthehitman (1 notes)
- Devman (1 notes)
- Dharma (1 notes)
- Diavol (2 notes)
- Direwolf (1 notes)
- Donut (1 notes)
- Doppelpaymer (4 notes)
- Dragonforce (2 notes)
E
F
G
- Gandcrab (2 notes)
- Global (1 notes)
- Gr33nbl00d (1 notes)
- Grief (1 notes)
- Gunra (2 notes)
- Gwisinlocker (1 notes)
H
I
- Icefire (1 notes)
- INC (5 notes)
- Industrialspy (1 notes)
- Interlock (4 notes)
J
- Jaff (1 notes)
K
L
M
N
O
- Obscura (1 notes)
- Osiris Project (1 notes)
P
- Payload (1 notes)
- Payoutsking (1 notes)
- Phobos (1 notes)
- Play (3 notes)
- Prolock (1 notes)
- Prometheus (1 notes)
- Punisher (1 notes)
Q
- Qilin (3 notes)
- Qlocker (1 notes)
- Quantumlocker (1 notes)
- Quicklock (1 notes)
R
- Ragnarlocker (2 notes)
- Ragnarok (2 notes)
- Ralord (1 notes)
- Rancoz (1 notes)
- Ransomexx (5 notes)
- Ransomhouse (3 notes)
- Ransomhub (4 notes)
- Ranzy (1 notes)
- Raworld (2 notes)
- Redalert (1 notes)
- Relic (1 notes)
- Revil (3 notes)
- Reynolds (1 notes)
- Rhysida (1 notes)
- Risen (4 notes)
- Rook (1 notes)
- Royal (1 notes)
- Rtmlocker (1 notes)
- Ryuk (1 notes)
S
T
- Targetcompany (1 notes)
- Tengu (3 notes)
- Termite (1 notes)
- Teslacrypt (1 notes)
- Thegentlemen (2 notes)
- Thor (1 notes)
- Tommyleaks (1 notes)
- Trigona (1 notes)
- Trinity (1 notes)
U
- U Bomb (1 notes)
- Underground (1 notes)
V
- Valencia (1 notes)
- Vanhelsing (1 notes)
- Vect (1 notes)
- Vicesociety (1 notes)
- Vohuk (1 notes)
W
- WA (1 notes)
- Warlock (2 notes)
- Wastedlocker (1 notes)
- Weaxor (2 notes)
- Whitelock (1 notes)
X
Y
- Yanluowang (1 notes)
Z
- Zeon (1 notes)
Recently imported notes
Synchronized Jul 22, 2026, 11:47 AM| Ransomware family | Original filename | Format | Archive ID |
|---|---|---|---|
| 0APT | README0apt.txt | .txt | note-0apt-readme0apt-txt |
| 3AM | RECOVER-FILES.txt | .txt | note-3am-recover-files-txt |
| 8Base | 8base_note.hta | .hta | note-8base-8base-note-hta |
| 8Base | 8base_note.txt | .txt | note-8base-8base-note-txt |
| 8Base | READ_NOTE.html | .html | note-8base-read-note-html |
| Abysslocker | [victim]-[encrypted_file].README_TO_RESTORE | .readme_to_restore | note-abysslocker-victim-encrypted-file-readme-to-restore |
| Abysslocker | WhatHappened.txt | .txt | note-abysslocker-whathappened-txt |
| Ailock | ReadMe[1].txt | .txt | note-ailock-readme-1-txt |
| Akira | akira_readme_2.txt | .txt | note-akira-akira-readme-2-txt |
| Akira | akira_readme_3.txt | .txt | note-akira-akira-readme-3-txt |
| Akira | akira_readme.txt | .txt | note-akira-akira-readme-txt |
| Ako | ako-readme.txt | .txt | note-ako-ako-readme-txt |
Ransomware family directory
| 0APT | 1 | .txt | No mapped actor | Complete |
|---|---|---|---|---|
| 3AM | 1 | .txt | No mapped actor | Complete |
| 8Base | 3 | .hta, .html, .txt | No mapped actor | Complete |
| Abysslocker | 2 | .readme_to_restore, .txt | No mapped actor | Complete |
| Ailock | 1 | .txt | No mapped actor | Complete |
| Akira | 3 | .txt | 60 records | Complete |
| Ako | 1 | .txt | No mapped actor | Complete |
| Alpha | 1 | .txt | No mapped actor | Complete |
| ALPHV | 4 | .txt | No mapped actor | Complete |
| Antefrigus | 1 | .txt | No mapped actor | Complete |
| Arcus | 1 | .txt | No mapped actor | Complete |
| Atomsilo | 1 | .hta | No mapped actor | Complete |
| Auditteam | 1 | .txt | No mapped actor | Complete |
| Aurora | 1 | .txt | No mapped actor | Complete |
| Avaddon | 1 | .txt | 7 records | Complete |
| Avoslocker | 1 | .txt | 1 records | Complete |
| Aware | 1 | .txt | No mapped actor | Complete |
| Azov | 1 | .txt | No mapped actor | Complete |
| Beast | 1 | .txt | No mapped actor | Complete |
| Bert | 1 | .txt | No mapped actor | Complete |
| Bianlian | 1 | .txt | No mapped actor | Complete |
| Biglock | 1 | .txt | No mapped actor | Complete |
| Bitpaymer | 2 | .txt | No mapped actor | Complete |
| Bitransomware | 1 | .txt | No mapped actor | Complete |
| Blackbasta | 5 | .txt | 5 records | Complete |
| Blackbyte | 4 | .txt | No mapped actor | Complete |
| Blackfield | 1 | .txt | No mapped actor | Complete |
| Blackhunt | 1 | .html | No mapped actor | Complete |
| Blacklock | 3 | .txt | No mapped actor | Complete |
| Blackmatter | 1 | .txt | 2 records | Complete |
| Blacksnake | 1 | .txt | No mapped actor | Complete |
| Blacksuit | 1 | .txt | No mapped actor | Complete |
| Blackwater | 1 | .txt | No mapped actor | Complete |
| Bluesky | 1 | .txt | No mapped actor | Complete |
| Bluewindgroup | 1 | .txt | No mapped actor | Complete |
| Booba | 1 | .txt | No mapped actor | Complete |
| Braincipher | 3 | .txt | No mapped actor | Complete |
| Bytesfromheaven | 1 | .txt | No mapped actor | Complete |
| Cactus | 6 | .txt | No mapped actor | Complete |
| Cartel | 1 | .txt | No mapped actor | Complete |
| Cerber | 4 | .txt | No mapped actor | Complete |
| Chaos | 1 | .txt | No mapped actor | Complete |
| Chilelocker | 3 | .txt | No mapped actor | Complete |
| Cicada3301 | 1 | .txt | No mapped actor | Complete |
| Ciphbit | 1 | .txt | No mapped actor | Complete |
| Clearwater | 2 | .txt | No mapped actor | Complete |
| Cloak | 3 | .txt | 2 records | Complete |
| Clop | 4 | .txt | No mapped actor | Complete |
| Conti | 4 | .txt | 32 records | Complete |
| Cryptnet | 1 | .txt | No mapped actor | Complete |
| Crypto24 | 1 | .txt | No mapped actor | Complete |
| Cryptomix | 1 | .txt | No mapped actor | Complete |
| Cryptxxx | 1 | .txt | No mapped actor | Complete |
| Crytox | 1 | .hta | No mapped actor | Complete |
| Ctblocker | 1 | .txt | No mapped actor | Complete |
| Cuba | 1 | .txt | No mapped actor | Complete |
| Cyberex | 1 | .txt | No mapped actor | Complete |
| Dagonlocker | 1 | .html | No mapped actor | Complete |
| Darkangels | 2 | .txt | No mapped actor | Complete |
| Darkbit | 1 | .txt | No mapped actor | Complete |
| Darkpower | 0 | No supported format | No mapped actor | Unsupported source only |
| Darkside | 1 | .txt | 5 records | Complete |
| Datacarry | 1 | .txt | No mapped actor | Complete |
| Dataf | 1 | .txt | No mapped actor | Complete |
| Dataleak | 2 | .txt | No mapped actor | Complete |
| Deadbydawn | 1 | .txt | No mapped actor | Complete |
| Dennisthehitman | 1 | .html | No mapped actor | Complete |
| Devman | 1 | .txt | No mapped actor | Complete |
| Dharma | 1 | .txt | No mapped actor | Complete |
| Diavol | 2 | .txt | No mapped actor | Complete |
| Direwolf | 1 | .txt | No mapped actor | Complete |
| Donut | 1 | .html | No mapped actor | Complete |
| Doppelpaymer | 4 | .txt | No mapped actor | Complete |
| Dragonforce | 2 | .txt, .xt | 14 records | Complete |
| Ech0raix | 1 | .txtt | No mapped actor | Complete |
| Eldorado | 2 | .txt | No mapped actor | Complete |
| Embargo | 2 | .txt | No mapped actor | Complete |
| Esxiargs | 1 | .html | No mapped actor | Complete |
| Everest | 1 | .txt | No mapped actor | Complete |
| Evolution | 1 | .txt | No mapped actor | Complete |
| Exitium | 1 | .html | No mapped actor | Complete |
| Fog | 2 | .txt | 6 records | Complete |
| FTCode | 1 | .htm | No mapped actor | Complete |
| Gandcrab | 2 | .txt | No mapped actor | Complete |
| Global | 1 | .txt | No mapped actor | Complete |
| Gr33nbl00d | 1 | .txt | No mapped actor | Complete |
| Grief | 1 | .txt | No mapped actor | Complete |
| Gunra | 2 | .txt | No mapped actor | Complete |
| Gwisinlocker | 1 | .txt | No mapped actor | Complete |
| H0lygh0st | 1 | .html | No mapped actor | Complete |
| Hades | 1 | .txt | No mapped actor | Complete |
| Hellcat | 1 | .txt | No mapped actor | Complete |
| Helldown | 1 | .txt | No mapped actor | Complete |
| Hellokitty | 1 | .readme_to_restore | No mapped actor | Complete |
| Hive | 2 | .txt | 8 records | Complete |
| Hunters | 3 | .txt | 1 records | Complete |
| Icefire | 1 | .txt | No mapped actor | Complete |
| INC | 5 | .html, .txt | No mapped actor | Complete |
| Industrialspy | 1 | .txt | No mapped actor | Complete |
| Interlock | 4 | .txt | No mapped actor | Complete |
| Jaff | 1 | .html | No mapped actor | Complete |
| Kairos | 1 | .txt | 1 records | Complete |
| Karakurt | 2 | .txt | No mapped actor | Complete |
| Karma | 1 | .txt | No mapped actor | Complete |
| Kawalocker | 2 | .txt | No mapped actor | Complete |
| Killada | 1 | .txt | No mapped actor | Complete |
| Knight | 2 | .txt | No mapped actor | Complete |
| Kraken | 1 | .txt | No mapped actor | Complete |
| Krybit | 1 | .txt | No mapped actor | Complete |
| Krypt | 2 | .txt | No mapped actor | Complete |
| Kuiper | 1 | .txt | No mapped actor | Complete |
| Kyber | 1 | .txt | No mapped actor | Complete |
| Lamashtu | 1 | .txt | No mapped actor | Complete |
| Lambda | 1 | .txt | No mapped actor | Complete |
| Lapiovra | 1 | .txt | No mapped actor | Complete |
| Leaknet | 1 | .txt | No mapped actor | Complete |
| Lilith | 1 | .txt | No mapped actor | Complete |
| Linkc | 1 | .txt | No mapped actor | Complete |
| Lockbit | 5 | .txt | 42 records | Complete |
| Locky | 1 | .txt | No mapped actor | Complete |
| Lorenz | 2 | .html, .txt | No mapped actor | Complete |
| Luckbit | 1 | .log | No mapped actor | Complete |
| LV | 1 | .txt | No mapped actor | Complete |
| Lynx | 2 | .txt | No mapped actor | Complete |
| M3RX | 1 | .txt | No mapped actor | Complete |
| Magniber | 1 | .txt | No mapped actor | Complete |
| Makop | 1 | .txt | No mapped actor | Complete |
| Mallox | 2 | .txt | 3 records | Complete |
| Maze | 1 | .txt | No mapped actor | Complete |
| Medusa | 2 | .txt | No mapped actor | Complete |
| Medusalocker | 1 | .html | No mapped actor | Complete |
| Moneymessage | 2 | .log, .txt | No mapped actor | Complete |
| Monti | 2 | .txt | No mapped actor | Complete |
| Morpheus | 1 | .txt | No mapped actor | Complete |
| Mortar | 1 | .txt | No mapped actor | Complete |
| Naga | 1 | .txt | No mapped actor | Complete |
| Nblock | 1 | .txt | No mapped actor | Complete |
| Nefilim | 1 | .txt | No mapped actor | Complete |
| Nemesis | 1 | .txt | No mapped actor | Complete |
| Nemty | 3 | .txt | No mapped actor | Complete |
| Netrunner | 1 | .txt | No mapped actor | Complete |
| Netwalker | 1 | .txt | No mapped actor | Complete |
| Nevada | 1 | .txt | No mapped actor | Complete |
| Nightspire | 4 | .txt | 7 records | Complete |
| Nitrogen | 2 | .txt | No mapped actor | Complete |
| Noescape | 3 | .txt | 2 records | Complete |
| Nokoyawa | 2 | .txt | No mapped actor | Complete |
| Noname | 2 | .txt | No mapped actor | Complete |
| Nova | 1 | .me | No mapped actor | Complete |
| Novagroup | 1 | .txt | No mapped actor | Complete |
| Nullbulge | 1 | .txt | No mapped actor | Complete |
| Obscura | 1 | .txt | No mapped actor | Complete |
| Osiris Project | 1 | .txt | No mapped actor | Complete |
| Payload | 1 | .txt | No mapped actor | Complete |
| Payoutsking | 1 | .txt | No mapped actor | Complete |
| Phobos | 1 | .txt | No mapped actor | Complete |
| Play | 3 | .txt | No mapped actor | Complete |
| Prolock | 1 | .txt | No mapped actor | Complete |
| Prometheus | 1 | .txt | No mapped actor | Complete |
| Punisher | 1 | .txt | No mapped actor | Complete |
| Qilin | 3 | .txt | 2 records | Complete |
| Qlocker | 1 | .txt | No mapped actor | Complete |
| Quantumlocker | 1 | .html | No mapped actor | Complete |
| Quicklock | 1 | .txt | No mapped actor | Complete |
| Ragnarlocker | 2 | .txt | No mapped actor | Complete |
| Ragnarok | 2 | .html, .txt | No mapped actor | Complete |
| Ralord | 1 | .txt | No mapped actor | Complete |
| Rancoz | 1 | .txt | No mapped actor | Complete |
| Ransomexx | 5 | .txt | No mapped actor | Complete |
| Ransomhouse | 3 | .txt | No mapped actor | Complete |
| Ransomhub | 4 | .txt | 1 records | Complete |
| Ranzy | 1 | .txt | 2 records | Complete |
| Raworld | 2 | .txt | No mapped actor | Complete |
| Redalert | 1 | .txt | No mapped actor | Complete |
| Relic | 1 | .html | No mapped actor | Complete |
| Revil | 3 | .txt | 20 records | Complete |
| Reynolds | 1 | .txt | No mapped actor | Complete |
| Rhysida | 1 | .txt | No mapped actor | Complete |
| Risen | 4 | .hta, .txt | No mapped actor | Complete |
| Rook | 1 | .txt | No mapped actor | Complete |
| Royal | 1 | .txt | No mapped actor | Complete |
| Rtmlocker | 1 | .txt | No mapped actor | Complete |
| Ryuk | 1 | .txt | No mapped actor | Complete |
| Safepay | 2 | .txt | No mapped actor | Complete |
| Satancd | 1 | .txt | No mapped actor | Complete |
| Scarecrow | 1 | .txt | No mapped actor | Complete |
| Schoolboys | 1 | .txt | No mapped actor | Complete |
| Sensayq | 1 | .txt | No mapped actor | Complete |
| Shadow | 1 | .txt | No mapped actor | Complete |
| Sinobi | 1 | .txt | No mapped actor | Complete |
| Slug | 1 | .txt | No mapped actor | Complete |
| Snatch | 1 | .txt | No mapped actor | Complete |
| Stop | 1 | .txt | No mapped actor | Complete |
| Sugar | 1 | .txt | No mapped actor | Complete |
| Suncrypt | 1 | .html | No mapped actor | Complete |
| Synapse | 1 | .txt | No mapped actor | Complete |
| Targetcompany | 1 | .txt | No mapped actor | Complete |
| Tengu | 3 | .txt | No mapped actor | Complete |
| Termite | 1 | .txt | No mapped actor | Complete |
| Teslacrypt | 1 | .txt | No mapped actor | Complete |
| Thegentlemen | 2 | .txt | No mapped actor | Complete |
| Thor | 1 | .txt | No mapped actor | Complete |
| Tommyleaks | 1 | .txt | No mapped actor | Complete |
| Trigona | 1 | .hta | No mapped actor | Complete |
| Trinity | 1 | .txt | 14 records | Complete |
| U Bomb | 1 | .txt | No mapped actor | Complete |
| Underground | 1 | .txt | No mapped actor | Complete |
| Valencia | 1 | .txt | No mapped actor | Complete |
| Vanhelsing | 1 | .txt | No mapped actor | Complete |
| Vect | 1 | .txt | No mapped actor | Complete |
| Vicesociety | 1 | .txt | No mapped actor | Complete |
| Vohuk | 1 | .txt | No mapped actor | Complete |
| WA | 1 | .txt | No mapped actor | Complete |
| Warlock | 2 | .txt | No mapped actor | Complete |
| Wastedlocker | 1 | .txt | No mapped actor | Complete |
| Weaxor | 2 | .txt | No mapped actor | Complete |
| Whitelock | 1 | .txt | No mapped actor | Complete |
| Xleaks | 1 | .txt | No mapped actor | Complete |
| Xorist | 1 | .txt | No mapped actor | Complete |
| Yanluowang | 1 | .txt | No mapped actor | Complete |
| Zeon | 1 | .txt | No mapped actor | Complete |
No matching families
No ransomware families match the current directory filter.