Database of ransomware

Dharma ransomware is a cryptovirus that uses contact email and random combination of letters to mark encrypted files. More

IT.Books ransomware – a file locking threat which displays the READ__IT.txt ransom message and demands a particular price. More

Omerta ransomware is a data locker that prompts victims to pay ransom for the decryption key. More

Amnesia ransomware is a variant of Scarab virus and first showed up in March 2018. More

Monro ransomware is the third variant of file-locking Dharma virus discovered in the same week . More

Mimicry ransomware is a cryptovirus that mimics features of other threats. More

Everbe 2.0 ransomware is a file locker which comes back with undecryptable variants. More

AlldataLocker – a file-encrypting virus which can be recognized from the “how to unlock your files.txt” ransom note. More

LIGMA ransomware is a virus that functions as a wiper. LIGMA ransomware is a new infection that showed up in September 2018.More

ViroBotnet ransomware is a virus that modifies the targeted system and marks files with .enc extension. More

Gamma ransomware — yet another Dharma and Crysis variant that emerged less than a week after its predecessor. More

Yyto ransomware — a dangerous cryptovirus that has been active since July 2018. More

Matrix ransomware is a crypto virus that recently returned with .ITLOCK variant. More

Rektware ransomware – a virus which encrypts files but does not demand a ransom. More

Brrr ransomware — another file-locking cryptovirus that offers to decrypt one file before paying the ransom. More

SAVEfiles ransomware – a dangerous file locking virus which urges $300 in Bitcoin for the decryption tool. More

StorageCrypter — ransomware that encrypts data on the Cloud and targets South Korea. More

MVP ransomware – a file locking virus which highers its ransom every 24 hours. More

STOP ransomware is a dangerous a crypto-malware that has been prevalent since December 2017. More

KCTF Locker ransomware is yet another cyber threat that poses as an educational ransomware. More

Paydecryption@qq.com – ransomware which has similarities with Dharma virus and Crysis Ransomware. More

Shrug2 ransomware is a file-encrypting virus that that pretends to be from the same family as WannaCry. More

yy0 ransomware — a crypto-virus that marks encrypted files with .davilarita@mail.com.yyy0 file extension. More

Pottieq ransomware is a file-encrypting virus that demands its victims to use shivamana@seznam.cz email address to contact its owners. More

“Oops your files have been encrypted” is a threat that executes ransomware virus on the system. More

5H311 1NJ3C706 ransomware is a screenlocker with the encryption code. More

Suri ransomware – a file locking threat which targets Italian speakers and adds the .SLAV appendix to encrypted files. More

Shiva ransomware – a virus which ads the .id–[shivamana@seznam.cz].pip appendix to locked data. More

PTP – ransomware which is a Hidden Tear variant targeting English and Korean-speaking users . More

.lockymap virus is a ransomware that hails from PyLocky family. More

Eoeo ransomware is a file-locking virus that encrypts data twice. More

OPdailyallowance is a ransomware-type virus that locks your files with .CRYPTR appendix. More