From 769e7979ad8557d200807a8bb5ba04f33d9e2f8e Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Tue, 11 Jan 2022 13:48:06 +0000 Subject: [PATCH 01/11] Added Darknet --- forum.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/forum.md b/forum.md index 07885ee..8c4fb83 100644 --- a/forum.md +++ b/forum.md @@ -18,6 +18,7 @@ |CRYPTBB| http://cryptbbtg65gibadeeo2awe3j7s6evg7eklserehqr4w4e2bis5tebid.onion/| |DARK2WEB| https://dark2web.net/| |DARKMARKET| https://darkmarket.at/| +|DARKNET| https://darknet.ug/| |DARKSIDE| https://www.dark-side.black/| |DEDICATET| https://dedicatet.com/| |DEFCON| http://ezdhgsy2aw7zg54z6dqsutrduhl22moami5zv2zt6urr6vub7gs6wfad.onion| @@ -57,7 +58,6 @@ |NULLEDBB| https://nulledbb.com/| |OGUSERS| https://www.ogusers.com/| |PAYLOAD.SH| https://payload.sh/| -|PIRATEBUHTA| https://s1.piratebuhta.net/| |PROLOGIC| https://prologic.su/| |RAID FORUM| https://raidforums.com/| |RAID FORUM (mirror 1)| https://rf.ws| From a3234e31ca11d39bab8d0bb49431826025c0e222 Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Tue, 11 Jan 2022 14:48:10 +0000 Subject: [PATCH 02/11] Zeroc0d3r channel added --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index b5dbe9c..f841e19 100644 --- a/telegram.md +++ b/telegram.md @@ -1,5 +1,6 @@ |Link| Category| | ------ | ------ | +|https://t.me/zeroc0der_v2| Zeroc0d3r Threat Actor Channel |https://t.me/gladdos69_official| DDoS |https://t.me/arvin_club| |https://t.me/blackshadowsleaks3 (DELETED)| Black Shadow Iran based hacking group From 2191906b479085182a746b2c7759a67364fa50e5 Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Tue, 11 Jan 2022 14:50:21 +0000 Subject: [PATCH 03/11] Added O1Chat --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index b5dbe9c..7519998 100644 --- a/telegram.md +++ b/telegram.md @@ -1,5 +1,6 @@ |Link| Category| | ------ | ------ | +|https://t.me/O1chat| Market |https://t.me/gladdos69_official| DDoS |https://t.me/arvin_club| |https://t.me/blackshadowsleaks3 (DELETED)| Black Shadow Iran based hacking group From 13a755393449fb2dedde34995cbee39cca66a925 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 11 Jan 2022 21:04:02 +0100 Subject: [PATCH 04/11] Update telegram.md --- telegram.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telegram.md b/telegram.md index f841e19..8bfa46b 100644 --- a/telegram.md +++ b/telegram.md @@ -1,6 +1,6 @@ |Link| Category| | ------ | ------ | -|https://t.me/zeroc0der_v2| Zeroc0d3r Threat Actor Channel +|https://t.me/zeroc0d3r_v2| Zeroc0d3r Threat Actor Channel |https://t.me/gladdos69_official| DDoS |https://t.me/arvin_club| |https://t.me/blackshadowsleaks3 (DELETED)| Black Shadow Iran based hacking group From 3acb636d1e358c93723ebd8f1acf74d24ee6999e Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 11 Jan 2022 21:18:18 +0100 Subject: [PATCH 05/11] Add Pirate Buhta --- forum.md | 1 + 1 file changed, 1 insertion(+) diff --git a/forum.md b/forum.md index dd52d47..046fa9c 100644 --- a/forum.md +++ b/forum.md @@ -59,6 +59,7 @@ |NULLEDBB| https://nulledbb.com/| |OGUSERS| https://www.ogusers.com/| |PAYLOAD.SH| https://payload.sh/| +|PIRATEBUHTA| https://s1.piratebuhta.net/| |PROLOGIC| https://prologic.su/| |RAID FORUM| https://raidforums.com/| |RAID FORUM (mirror 1)| https://rf.ws| From 0689af2f40671cc7cb5d65610a55162244910ea8 Mon Sep 17 00:00:00 2001 From: Francesco Date: Wed, 12 Jan 2022 17:30:40 +0100 Subject: [PATCH 06/11] Update ransomware_gang.md --- ransomware_gang.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 85596fb..26af263 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -10,7 +10,7 @@ |AKO |http://kwvhrdibgmmpkhkidrby4mccwqpds5za6uo2thcw5gz75qncv7rbhyad.onion |(CURRENTLY DOWN)||| |ALPHV (aka BlackCat) (1)|http://2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onion|(CURRENTLY DOWN)||3488458145EB62D7D3947E3811234F4663D9B5AEEF6584AB08A2099A7F946664BBA2B0D30BFC| |ALPHV (aka BlackCat) (2) |http://alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion |||| -|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion |||| +|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion |(CURRENTLY DOWN)||| |ATOMSILO |http://mhdehvkomeabau7gsetnsrhkfign4jgnx3wajth5yb5h6kvzbd72wlqd.onion |(CURRENTLY DOWN)||| |ATOMSILO | http://l5cjga2ksw6rxumu5l4xxn3cmahhi2irkbwg3amx6ajroyfmfgpfllid.onion|||| |AVADDON |http://avaddongun7rngel.onion |(CURRENTLY DOWN)||| @@ -18,17 +18,17 @@ |AVOS (victims request id page) |http://avos2fuj6olp6x36.onion |||| |BABUK (old) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion |(CURRENTLY DOWN)||| |BABUK |http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion |||| -|BABYDUCK (victims request id Page) |http://babydovegkmhbontykziyq7qivwzy33mu4ukqefe4mqpiiwd3wibnjqd.onion |||| +|BABYDUCK (victims request id Page) |http://babydovegkmhbontykziyq7qivwzy33mu4ukqefe4mqpiiwd3wibnjqd.onion |(CURRENTLY DOWN)||| |BIT/LOLKEK/GLOBEIMPOSTER (SUPPORT PAGE) |http://mmeeiix2ejdwkmseycljetmpiwebdvgjts75c63camjofn2cjdoulzqd.onion ||| |BLACKBYTE (1) |http://6iaj3efye3q62xjgfxyegrufhewxew7yt4scxjd45tlfafyja6q4ctqd.onion |(CURRENTLY DOWN)||| -|BLACKBYTE (2) |http://f5uzduboq4fa2xkjloprmctk7ve3dm46ff7aniis66cbekakvksxgeqd.onion |||| -|BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion |||| -|BLACKMATTER Support |http://supp24maprinktc7uizgfyqhisx7lkszb6ogh6lwdzpac23w3mh4tvyd.onion/EWX33VYY3IGOXSG5ZZ2 |||| +|BLACKBYTE (2) |http://f5uzduboq4fa2xkjloprmctk7ve3dm46ff7aniis66cbekakvksxgeqd.onion |(CURRENTLY DOWN)||| +|BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion |(CURRENTLY DOWN)||| +|BLACKMATTER Support |http://supp24maprinktc7uizgfyqhisx7lkszb6ogh6lwdzpac23w3mh4tvyd.onion/EWX33VYY3IGOXSG5ZZ2 |(CURRENTLY DOWN)||| |BLACK SHADOW (DEEP WEB)|https://blackshadow.cc/ |||| |BLACK SHADOW |http://544corkfh5hwhtn4.onion |(CURRENTLY DOWN)||| |BONACI GROUP |http://bonacifryrxr4siz6ptvokuihdzmjzpveruklxumflz5thmkgauty2qd.onion |(CURRENTLY DOWN)||| |CLOP |http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion |||| -|CLOP (old) |http://ekbgzchl6x2ias37.onion |||| +|CLOP (old) |http://ekbgzchl6x2ias37.onion |(CURRENTLY DOWN)||| |CONTI/RYUK |http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion |||| |CONTI/RYUK (SURFACE WEB) |https://continews.click |||| |COOMINGPROJECT |http://teo7aj5mfgzxyeme.onion |||| From ebf7a3d5a4cc24d664e6df666f827c8ce6274e81 Mon Sep 17 00:00:00 2001 From: Francesco Date: Thu, 13 Jan 2022 11:42:07 +0100 Subject: [PATCH 07/11] Update ransomware_gang.md --- ransomware_gang.md | 34 +++++++++++++++++----------------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 26af263..304c95b 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -32,36 +32,36 @@ |CONTI/RYUK |http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion |||| |CONTI/RYUK (SURFACE WEB) |https://continews.click |||| |COOMINGPROJECT |http://teo7aj5mfgzxyeme.onion |||| -|COOMINGPROJECT (new) |http://z6mikrtphid5fmn52nbcbg25tj57sowlm3oc25g563yvsfmygkcxqbyd.onion |||| +|COOMINGPROJECT (new) |http://z6mikrtphid5fmn52nbcbg25tj57sowlm3oc25g563yvsfmygkcxqbyd.onion |(CURRENTLY DOWN)||| |COOMINGPROJECT (SURFACE WEB)|http://coomingproject.com |(CURRENTLY DOWN)||| |CRYLOCK (victims request id page) |http://d57uremugxjrafyg.onion |||| |CRYP70N1C0D3 |http://7k4yyskpz3rxq5nyokf6ztbpywzbjtdfanweup3skctcxopmt7tq7eid.onion/ |CUBA |http://cuba4mp6ximo2zlo.onion |(CURRENTLY DOWN)||| |CUBA |http://cuba4ikm4jakjgmkezytyawtdgr2xymvy6nvzgw5cglswg3si76icnqd.onion/ |||| |DARKLEAKS |http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion |||| -|DARKRYPT |https://darkrypt.io |||| +|DARKRYPT |https://darkrypt.io |(CURRENTLY DOWN)||| |DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion |(CURRENTLY DOWN)||| -|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion |||| +|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion |(CURRENTLY DOWN)||| |DOTADMIN | http://adminavf4cikzbv6mbbp7ujpwhygnn2t3egiz2pswldj32krrml42wyd.onion |||@dotADMINbot (Telegram)| |ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion |||| |EGREGOR |https://egregornews.com |(CURRENTLY DOWN)||| |ENTROPY |http://leaksv7sroztl377bbohzl42i3ddlfsxopcb6355zc7olzigedm5agad.onion ||| -|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion |||| +|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion |(CURRENTLY DOWN)||| |EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion ||||YES| -|EVILCORP |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion|||| +|EVILCORP |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion|(CURRENTLY DOWN)||| |EXORCIST |http://7iulpt5i6whht6zo2r52f7vptxtjxs3vfcdxxazllikrtqpupn4epnqd.onion |(CURRENTLY DOWN)||| |GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion |||| -|GROOVE |http://ws3dh6av66sjbxxkjpw5ao3wqzmtejnkzheswm4dz5rrwvular7xvkqd.onion |||| +|GROOVE |http://ws3dh6av66sjbxxkjpw5ao3wqzmtejnkzheswm4dz5rrwvular7xvkqd.onion |(CURRENTLY DOWN)||| |HADES |http://ixltdyumdlthrtgx.onion |(CURRENTLY DOWN)||| |HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion/blog.php ||Chaddadgroup:Chaddadgroup|| -|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion |||| +|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion |(CURRENTLY DOWN)||| |HITLER |http://hitleransomware.cf ||| |HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion |||| |HIVE (negotiation) |http://hivecust6vhekztbqgdnkks64ucehqacge3dij3gyrrpdp57zoq3ooqd.onion ||random generated user/pass in ransom note|| -|HOLYGHOST |http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion ||| -|HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion |||| -|KARAKURT |https://karakurt.tech |||| -|KARMA |http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion |||| +|HOLYGHOST |http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion |(CURRENTLY DOWN)||| +|HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion |(CURRENTLY DOWN)||| +|KARAKURT |https://karakurt.tech |(CURRENTLY DOWN)||| +|KARMA |http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion |(CURRENTLY DOWN)||| |LAPSUS$ ||||https://t.me/minsaudebr | |LOCKBIT 2.0 (mirror 1) |http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion | | | 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 | |LOCKBIT 2.0 (mirror 2) |http://lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion | | | 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 | @@ -77,17 +77,17 @@ |LOCKFILE (victim request id page)|http://zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion |||B2F873769EB6B508EBC2103DDEB7366CEFB7B09AB8314DAD0C4346169072686690489B47EAEB | |LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion |||| |LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion |||| -|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion |||| -|MARKETO (DEEP WEB) | https://marketo.cloud |||| -|MARKETO (tor v2) |http://g5sbltooh2okkcb2.onion |||| +|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion |(CURRENTLY DOWN)||| +|MARKETO (DEEP WEB) | https://marketo.cloud |(CURRENTLY DOWN)||| +|MARKETO (tor v2) |http://g5sbltooh2okkcb2.onion |(CURRENTLY DOWN)||| |MARKETO (tor v3 new) |http://jvdamsif53dqjycuozlaye2s47p7xij4x6hzwzwhzrqmv36gkyzohhqd.onion |||| -|MARKETO (tor v3 old) |http://fvki3hj7uxuirxpeop6chgqoczanmebutznt2mkzy6waov6w456vjuid.onion |||| +|MARKETO (tor v3 old) |http://fvki3hj7uxuirxpeop6chgqoczanmebutznt2mkzy6waov6w456vjuid.onion |(CURRENTLY DOWN)||| |MAZE |https://newsmaze.net |(CURRENTLY DOWN)||| -|MBC |http://xembshruusobgbvxg4tcjs3jpdnks6xrr6nbokfxadcnlc53yxir22ad.onion |||| +|MBC |http://xembshruusobgbvxg4tcjs3jpdnks6xrr6nbokfxadcnlc53yxir22ad.onion |(CURRENTLY DOWN)||| |MEDUSA LOCKER |http://qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion |||| |MIDAS/HARON |http://midasbkic5eyfox4dhnijkzc7v7e4hpmsb2qgux7diqbpna4up4rtdad.onion/blog.php ||| |Moses Staff (DEEP WEB) |http://moses-staff.se |||| -|Moses Staff |http://mosesstaffm7hptp.onion |||| +|Moses Staff |http://mosesstaffm7hptp.onion |(CURRENTLY DOWN)||| |MOUNT LOCKER |http://mountnewsokhwilx.onion |(CURRENTLY DOWN)||| |MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion |||| |N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion |(CURRENTLY DOWN)||| From 558c01dba2d3d0f8d4118e6e4eaa5559b1a6990e Mon Sep 17 00:00:00 2001 From: ocbrollingpaper <45208722+ocbrollingpaper@users.noreply.github.com> Date: Thu, 13 Jan 2022 23:27:46 +0100 Subject: [PATCH 08/11] Update ransomware_gang.md Pretty much their site is live on this ip, however there's no domains --- ransomware_gang.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang.md b/ransomware_gang.md index 304c95b..9beb81f 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -61,6 +61,7 @@ |HOLYGHOST |http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion |(CURRENTLY DOWN)||| |HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion |(CURRENTLY DOWN)||| |KARAKURT |https://karakurt.tech |(CURRENTLY DOWN)||| +|KARAKURT 2.0 | http://209.222.98.19 | LIVE SINCE 10th ||| |KARMA |http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion |(CURRENTLY DOWN)||| |LAPSUS$ ||||https://t.me/minsaudebr | |LOCKBIT 2.0 (mirror 1) |http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion | | | 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 | From bb7a4d2fc8553427748cefaad7fb29fb47a72e3a Mon Sep 17 00:00:00 2001 From: Francesco Date: Fri, 14 Jan 2022 16:53:52 +0100 Subject: [PATCH 09/11] Update ransomware_gang.md --- ransomware_gang.md | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 304c95b..2f15506 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -31,7 +31,7 @@ |CLOP (old) |http://ekbgzchl6x2ias37.onion |(CURRENTLY DOWN)||| |CONTI/RYUK |http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion |||| |CONTI/RYUK (SURFACE WEB) |https://continews.click |||| -|COOMINGPROJECT |http://teo7aj5mfgzxyeme.onion |||| +|COOMINGPROJECT |http://teo7aj5mfgzxyeme.onion |(CURRENTLY DOWN)||| |COOMINGPROJECT (new) |http://z6mikrtphid5fmn52nbcbg25tj57sowlm3oc25g563yvsfmygkcxqbyd.onion |(CURRENTLY DOWN)||| |COOMINGPROJECT (SURFACE WEB)|http://coomingproject.com |(CURRENTLY DOWN)||| |CRYLOCK (victims request id page) |http://d57uremugxjrafyg.onion |||| @@ -89,9 +89,9 @@ |Moses Staff (DEEP WEB) |http://moses-staff.se |||| |Moses Staff |http://mosesstaffm7hptp.onion |(CURRENTLY DOWN)||| |MOUNT LOCKER |http://mountnewsokhwilx.onion |(CURRENTLY DOWN)||| -|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion |||| +|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion |(CURRENTLY DOWN)||| |N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion |(CURRENTLY DOWN)||| -|NEFILIM |http://hxt254aygrsziejn.onion |||| +|NEFILIM |http://hxt254aygrsziejn.onion |(CURRENTLY DOWN)||| |NEMTY |http://nemty.top |(CURRENTLY DOWN)||| |NEMTY |http://zjoxyw5mkacojk5ptn2iprkivg5clow72mjkyk5ttubzxprjjnwapkad.onion |(CURRENTLY DOWN)||| |NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)||| @@ -100,33 +100,33 @@ |PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion |||| |PAYLOAD.BIN (EX BABUK LOCKER) |http://vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion |||| |PROLOCK |http://msaoyrayohnp32tcgwcanhjouetb5k54aekgnwg7dcvtgtecpumrxpqd.onion |(CURRENTLY DOWN)||| -|PROMETHEUS |http://promethw27cbrcot.onion/blog |||| +|PROMETHEUS |http://promethw27cbrcot.onion/blog |(CURRENTLY DOWN)||| |PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html |||| |QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion |||| |QUANTUM| http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion |||| |RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion |(CURRENTLY DOWN)||| |RAGNAR LOCKER |http://rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion |||| |RAGNAR LOCKER (old) |http://ragnarleaks.top |(CURRENTLY DOWN)||| -|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion |||| +|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion |(CURRENTLY DOWN)||| |RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion |(CURRENTLY DOWN)||| |RANSOM CARTEL |http://u67aylig7i6l657wxmp274eoilaowhp3boljowa6bli63rxyzfzsbtyd.onion/ |||| |RANSOMEXX |http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion |||| |RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion |(CURRENTLY DOWN)||| |REVIL |http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion |||| -|ROBINHOOD |https://robinhoodleaks.tumblr.com |||| +|ROBINHOOD |https://robinhoodleaks.tumblr.com |(CURRENTLY DOWN)||| |ROOK |http://gamol6n6p2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onion |||| -|RRANSOM (victims page) |http://t2tqvp4pctcr7vxhgz5yd5x4ino5tw7jzs3whbntxirhp32djhi7q3id.onion/check_payment_form ||| +|RRANSOM (victims page) |http://t2tqvp4pctcr7vxhgz5yd5x4ino5tw7jzs3whbntxirhp32djhi7q3id.onion/check_payment_form |(CURRENTLY DOWN)||| |SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)||| |SNATCH (DEEP WEB) |https://snatch.press/ |||| |SNATCH (DEEP WEB) |http://snatch.vip |(CURRENTLY DOWN)||| |SNATCH |http://hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion/index.php |||| -|SODINOKIBI (REVIL) |http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion |||| -|SPOOK DATA |http://spookuhvfyxzph54ikjfwf2mwmxt572krpom7reyayrmxbkizbvkpaid.onion/blog/ ||||YES| -|SUNCRYPT (tor v2) |http://nbzzb6sa6xuura2z.onion |||| +|SODINOKIBI (REVIL) |http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion |(CURRENTLY DOWN)||| +|SPOOK DATA |http://spookuhvfyxzph54ikjfwf2mwmxt572krpom7reyayrmxbkizbvkpaid.onion/blog/ |(CURRENTLY DOWN)|||YES| +|SUNCRYPT (tor v2) |http://nbzzb6sa6xuura2z.onion |(CURRENTLY DOWN)||| |SUNCRYPT (tor v3) |http://x2miyuiwpib2imjr5ykyjngdu7v6vprkkhjltrk4qafymtawey4qzwid.onion |||| -|SynACK (El_Cometa) |http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion |||| -|VFOKX (1) |http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion |||| -|VFOKX (2) |http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion |||| +|SynACK (El_Cometa) |http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion |(CURRENTLY DOWN)||| +|VFOKX (1) |http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion |(CURRENTLY DOWN)||| +|VFOKX (2) |http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion |(CURRENTLY DOWN)||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion |(CURRENTLY DOWN)|| |VICE SOCIETY |http://vsociethok6sbprvevl4dlwbqrzyhxcxaqpvcqt5belwvsuxaxsutyad.onion ||| |XING LOCKER |http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion |||| From 040c11814385e76be52659982e6e73399ee02d18 Mon Sep 17 00:00:00 2001 From: Francesco Date: Fri, 14 Jan 2022 18:12:46 +0100 Subject: [PATCH 10/11] Update ransomware_gang.md --- ransomware_gang.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 304c95b..decbc52 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -35,7 +35,7 @@ |COOMINGPROJECT (new) |http://z6mikrtphid5fmn52nbcbg25tj57sowlm3oc25g563yvsfmygkcxqbyd.onion |(CURRENTLY DOWN)||| |COOMINGPROJECT (SURFACE WEB)|http://coomingproject.com |(CURRENTLY DOWN)||| |CRYLOCK (victims request id page) |http://d57uremugxjrafyg.onion |||| -|CRYP70N1C0D3 |http://7k4yyskpz3rxq5nyokf6ztbpywzbjtdfanweup3skctcxopmt7tq7eid.onion/ +|CRYP70N1C0D3 |http://7k4yyskpz3rxq5nyokf6ztbpywzbjtdfanweup3skctcxopmt7tq7eid.onion/|||| |CUBA |http://cuba4mp6ximo2zlo.onion |(CURRENTLY DOWN)||| |CUBA |http://cuba4ikm4jakjgmkezytyawtdgr2xymvy6nvzgw5cglswg3si76icnqd.onion/ |||| |DARKLEAKS |http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion |||| From 7416f287c07cf92077fceba962e9a9aaa8b3daf3 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 14 Jan 2022 23:47:26 +0100 Subject: [PATCH 11/11] Fix --- ransomware_gang.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 9beb81f..54d177a 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -61,7 +61,7 @@ |HOLYGHOST |http://matmq3z3hiovia3voe2tix2x54sghc3tszj74xgdy4tqtypoycszqzqd.onion |(CURRENTLY DOWN)||| |HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion |(CURRENTLY DOWN)||| |KARAKURT |https://karakurt.tech |(CURRENTLY DOWN)||| -|KARAKURT 2.0 | http://209.222.98.19 | LIVE SINCE 10th ||| +|KARAKURT 2.0 | https://209.222.98.19 |||| |KARMA |http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion |(CURRENTLY DOWN)||| |LAPSUS$ ||||https://t.me/minsaudebr | |LOCKBIT 2.0 (mirror 1) |http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion | | | 3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 |