Ransomware crews publish their victims to pressure them into paying. We watch
every leak site, record every claim, and connect it to the group behind it —
their techniques, their infrastructure, and everyone else they have hit.
Free, live, and no signup.
—
named · 24 hours
—
named · 7 days
—
named · 30 days
—
active crews
—
claims on record
Live feed
most recent first · click a row for the crew
loading…
Who is busiest right now
last 7 days vs the 7 before · click for the dossier
loading…
Where it is landing
last 30 days
by sector
loading…
by country
loading…
Two years of pressure
victims named per month
Is your estate exposed?
This feed is the aftermath — by the time a name appears here, the intrusion
happened weeks ago. Ninja Signal tracks the front half: the exploited CVEs,
the access brokers, and the infrastructure these same crews stage on.