Database of ransomware

LockerGoga is a ransomware-type virus that recently attacked Norwegian aluminum producer. More

JNEC.a ransomware is a file locking malware that spreads with the help of WinRAR code execution vulnerability. More

Golden Axe ransomware – a file locking virus which adds five random characters to the encrypted file. More

NWA ransomware is a file locking malware that uses explorer.exe as its main executable. More

Kropun ransomware is another variant of the devastating STOP ransomware virus. More

MegaLocker virus – ransomware which performs the encryption by using the AES-128 cipher in the CBC mode. More

Kroput ransomware – a file-locking threat which belongs to the Djvu family and appends the .kroput extension to each file. More

Yatron ransomware – a file-encrypting virus which uses EternalBlue and DoublePulsar exploits to enter Windows computer systems. More

Clop ransomware is evasive malware that targets corporate networks instead of regular computer users. More

Promorad ransomware – a Djvu-related virus which offers a 50% discount for the decryption key. More

CrazyCrypt ransomware is a cryptovirus based on other threats, that releases three new versions in the span of a week. More

X3 ransomware – yet another Scarab ransomware version that shows up at the beginning of 2019. More

Promock ransomware – a file-encrypting cyber threat which belongs to the Djvu ransomware family. More

Annabelle 2.1 ransomware is a wiper-type virus that corrupts all personal data on the computer. More

Kitty ransomware – a cryptovirus that renames every encrypted file on users' system with .kitty file marker. More

GlobeImposter 2.0 ransomware receives yet another update in 2018. More

Jokeroo ransomware is a notorious threat which creates a payment site and convinces users to spread the malware further. More

DeltaSEC ransomware is malware that relates to Jigsaw family but fails to encrypt any files. More

JCry ransomware is a crypto-virus that was meant  to be delivered to Israeli website visitors in the #OpJerusalem campaign. More

CSP ransomware is the cryptovirus that locks users' data with the AES encryption algorithm and demands payment in Bitcoin cryptocurrency. More

GandCrab 5.2 is the ransomware that came out quickly after Bitdefender's decryptor for previous versions was released. More

GarrantyDecrypt is the cryptovirus that releases the newest variant In February 2019 which pretends to be the alert from the Proton security team. More

Cammora ransomware is the variant of GarrantyDecrypt cryptovirus that appends files using .cammora extension. More

Djvu ransomware is a data locking malware that uses a variety of file extensions, including .tfude, .pdff and .adobe. More

Promoz ransomware – a cryptolocker which belongs to the Djvu ransomware family. More

ARTEMY ransomware is a file locking malware that targets Russian users. More

Frendi ransomware is the cryptovirus that delivers two files with information about the attack: HTML window and Encrypted.txt. More

BestChangeRu ransomware is the cryptovirus that targets Russian users and demands 25 000 Rubles in Bitcoin . More

Obfuscated ransomware – a decryptable cryptovirus which is also known as BigBobRoss. More

Pewcrypt ransomware – a virus that is created to increase sub count for the famous YouTube star PewDiePie. More

DoggeWiper ransomware is crypto malware created by vulgar authors and is usually transmitted via Discord. More

AYE ransomware – a Dharma-related virus which appends the .AYE extension to locked files. More