Under maintenance

Pricing

from $3.00 / 1,000 results

Try for free

Go to Apify Store

Ransomware Victim Claims & Recent CVE Monitor

Under maintenance

Try for free

Track recent ransomware victim claims, company mentions, and what data actors say they have. Uses RansomLook search/recent/post index, ransomware.live, CISA KEV, and NVD CVE updates for preview or full monitoring exports.

Pricing

from $3.00 / 1,000 results

Rating

0.0

(0)

Developer

Eirik Hanasand

Actor stats

Bookmarked

Total users

Monthly active users

21 days ago

Last modified

Categories

News

You can access the Ransomware Victim Claims & Recent CVE Monitor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "queries": [
12        "lockbit3",
13        "qilin",
14        "akira",
15        "play",
16        "clop",
17        "lockbit2",
18        "ransomhub",
19        "incransom",
20        "alphv",
21        "dragonforce",
22        "bianlian",
23        "blackbasta",
24        "mbc",
25        "thegentlemen",
26        "safepay",
27        "8base",
28        "lynx",
29        "entropy",
30        "ContFR",
31        "dispossessor",
32        "lockbit3_fs",
33        "prometheus",
34        "holyghost",
35        "nightspire",
36        "killsec",
37        "sinobi",
38        "rhysida",
39        "cactus",
40        "royal",
41        "hellokitty",
42        "ransomhouse",
43        "fog",
44        "vfokx",
45        "blacksuit",
46        "devman",
47        "babuk2",
48        "stormous",
49        "coinbasecartel",
50        "handala",
51        "funksec",
52        "malas",
53        "worldleaks",
54        "cloak",
55        "apt73",
56        "blackbyte",
57        "nova",
58        "avaddon",
59        "meow",
60        "snatch",
61        "sarcoma",
62        "solidbit",
63        "ragnarlocker",
64        "shinyhunters",
65        "noescape",
66        "ranzy",
67        "SilentRansomGroup",
68        "toufan",
69        "ech0raix",
70        "interlock",
71        "monti",
72        "cuba",
73        "payoutsking",
74        "arcusmedia",
75        "pear",
76        "revil",
77        "Abrahams_Ax",
78        "genesis",
79        "kairos",
80        "ransomexx",
81        "anubis",
82        "thegreenbloodgroup",
83        "Loki",
84        "warlock",
85        "cicada3301",
86        "diavol",
87        "karakurt",
88        "avos",
89        "babyduck",
90        "qlocker",
91        "ransomed",
92        "medusalocker",
93        "blacklock",
94        "lv",
95        "BrainCipher",
96        "exorcist",
97        "maze",
98        "Payday",
99        "chaos",
100        "darkvault",
101        "krybit",
102        "losttrust",
103        "mallox",
104        "tengu",
105        "trigona",
106        "knight",
107        "nitrogen",
108        "crypto24",
109        "termite",
110        "midas",
111        "blackshrantac",
112        "donutleaks",
113        "gunra",
114        "J",
115        "adminlocker",
116        "darkangels",
117        "dragonransomware",
118        "embargo",
119        "securotrop",
120        "ciphbit",
121        "helldown",
122        "insomnia",
123        "nokoyawa",
124        "arvinclub",
125        "spook",
126        "lamashtu",
127        "dAn0n",
128        "obscura",
129        "wannacry",
130        "blackmatter",
131        "global",
132        "mamona",
133        "sugar",
134        "alphalocker",
135        "blacknevas",
136        "metaencryptor",
137        "frag",
138        "moneymessage",
139        "payloadbin",
140        "onepercent",
141        "kelvinsecurity",
142        "m3rx",
143        "netwalker",
144        "u-bomb",
145        "werewolves",
146        "doppelpaymer",
147        "fsteam",
148        "kraken",
149        "vect",
150        "lapsus$",
151        "rabbithole",
152        "CMDOrganization",
153        "dagonlocker",
154        "x001xs",
155        "haron",
156        "leaktheanalyst",
157        "bravox",
158        "cephalus",
159        "morpheus",
160        "ralord",
161        "siegedsec",
162        "brotherhood",
163        "d4rk4rmy",
164        "mountlocker",
165        "trinity",
166        "ako",
167        "kawa4096",
168        "sabbath",
169        "apos",
170        "datacarry",
171        "dread",
172        "madcat",
173        "mosesstaff",
174        "redransomware",
175        "tridentlocker",
176        "aurora",
177        "cheers",
178        "nefilim",
179        "AuditTeam",
180        "benzona",
181        "freecivilian",
182        "sparta",
183        "unknown",
184        "weyhro",
185        "argonauts",
186        "groove",
187        "mindware",
188        "IMNCrew",
189        "SevyWare",
190        "teamxxx",
191        "cry0",
192        "icefire",
193        "cooming",
194        "darkpower",
195        "darkrace",
196        "darkside",
197        "Deadlock",
198        "blackout",
199        "kazu",
200        "LeakBazaar",
201        "rook",
202        "titan",
203        "aware",
204        "cryptbb",
205        "mogilevich",
206        "qiulong",
207        "radiant",
208        "skira",
209        "VanHelsing",
210        "0mega",
211        "bert",
212        "blackwater",
213        "chilelocker",
214        "cyclops",
215        "karma",
216        "malekteam",
217        "pay2key",
218        "arkana",
219        "cipherforce",
220        "datakeeper",
221        "nemty",
222        "ramp",
223        "redalert",
224        "rransom",
225        "silent",
226        "xinof",
227        "0apt",
228        "atomsilo",
229        "Black%20X",
230        "bqtlock",
231        "donex",
232        "GDLockerSec",
233        "kryptos",
234        "lockbit",
235        "lockdata",
236        "minteye",
237        "orca",
238        "pandora",
239        "projectrelic",
240        "raznatovic",
241        "ValenciaLeaks",
242        "blacktor",
243        "desolator",
244        "exitium",
245        "lilith",
246        "ms13089",
247        "PrinzEugen",
248        "ranion",
249        "satanlockv2",
250        "shaoleaks",
251        "blackshadow",
252        "bluebox",
253        "bluelocker",
254        "grief",
255        "hellogookie",
256        "Icarus",
257        "mnt6",
258        "noname",
259        "orion",
260        "ragnarok",
261        "rebornvc",
262        "TiMc",
263        "trisec",
264        "vanirgroup",
265        "vendetta",
266        "yurei",
267        "cryptnet",
268        "kittykatkrew",
269        "lunalock",
270        "nevada",
271        "prolock",
272        "SenSayQ",
273        "Triple%20X",
274        "crosslock",
275        "hades",
276        "insane",
277        "kyber",
278        "mydecryptor",
279        "playboy",
280        "ranstreet",
281        "reynolds",
282        "robinhood",
283        "secp0",
284        "ShinySp1d3r",
285        "slug",
286        "synack",
287        "walocker",
288        "zeon"
289    ]
290};
291
292// Run the Actor and wait for it to finish
293const run = await client.actor("eirikhanasand/public-threat-actor-monitor").call(input);
294
295// Fetch and print Actor results from the run's dataset (if any)
296console.log('Results from dataset');
297console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
298const { items } = await client.dataset(run.defaultDatasetId).listItems();
299items.forEach((item) => {
300    console.dir(item);
301});
302
303// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Ransomware Victim Claims & Recent CVE Monitor API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Ransomware Victim Claims & Recent CVE Monitor API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Ransomware Victim Claims & Recent CVE Monitor API in Python

Ransomware Victim Claims & Recent CVE Monitor API through CLI

Ransomware Victim Claims & Recent CVE Monitor OpenAPI definition

Ransomware Victim Claims & Recent CVE Monitor API

Ransomware & Dark Web Data Breach Monitor

lofomachines/ransomware-dark-web-data-breach-monitor

Monitor ransomware attacks and data breaches from the dark web. Track ransomware groups like LockBit, BlackCat, Play, and more. Get real-time alerts on victim organizations, leaked data, and cyber threats. Essential for threat intelligence, cybersecurity research, and brand protection.

Lofomachines

117

5.0

The Beast: Ransomware Monitor

signalfoundry/the-beast-ransomware-monitor

The Beast: An automated ransomware tracker for the dark web. Scrape .onion leak sites via Tor, track victim history, and get 24/7 alerts for targeted matches

Frank Kamu

CISA KEV Scraper - CVE Threat Intelligence Feed

compute-edge/cisa-kev-scraper

Extract CISA Known Exploited Vulnerabilities (KEV) catalog data. Filter by vendor, product, date range, and ransomware flag. Includes computed remediation due-date fields.

Compute Edge

Cisa-Kev-Enricher.

signalfoundry/cisa-kev-ransomware-threat-intel

Prioritise real threats fast. Tracks CISA KEV catalogue live + EPSS v3 scores. Spots "Silent Flips" CVEs now used by ransomware (LockBit, BlackCat). 90%+ exploit probability, ransomware filter, SOC 2/HIPAA reports, Slack/Teams alerts, JSON/CSV export.

Frank Kamu

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

ParseForge

Cve Vulnerability Monitor

cyber-intel-tools/cve-vulnerability-monitor

One-line: "Monitor NVD, CISA KEV for critical CVEs by keyword and severity"

cyber-intel-tools

CISA KEV Scraper

maximedupre/cisa-kev-scraper

Extract the official CISA Known Exploited Vulnerabilities catalog. Get CVEs, vendors, products, due dates, required actions, ransomware-use status, summaries, and remediation-planning rows.

Maxime Dupré

CVE Feed: NVD, CISA KEV, GitHub Advisories Merged

thoob/threat-intel-feed

A CVE feed that merges NIST NVD, CISA KEV, and GitHub Advisories into one deduplicated record per CVE, with the source URL on every row. Official public data only, copied without inference, billed only per delivered record. An unchanged incremental run bills nothing.

Pono Data