Elastio Cyber Recovery
Ransomware Research
Elastio security team analyzes new ransomware strains to include in its machine learning engine, updating databases with new threats when identified and including them in recovery point scans.
Below is a list of detected or researched ransomware strains. For further information on origins, genealogy, behavior, and characteristics, click on an individual strain.
- 010001
- 05250lock
- 0XXX
- 16x
- 20dfs
- 24H
- 32aa
- 5ss5c
- 64-Random-HEX
- ABCD
- Acepy
- Admin Locker
- AepCrypt
- AESMew
- Afrodita
- AgeLocker
- Agenda
- Ahihi
- Ako
- Alco
- AlldataLocker
- AllDataStolen
- Allrighty
- AlphaBetaCrypt
- AMBA
- Amjixius
- Amogus
- Anatova
- AnimusLocker
- Annabelle
- Annabelle 2.1
- AnteFrigus
- AntiWar
- Anton-Artemon
- Aperfectday2018
- Apis
- Apocalypse
- Apocalypse-Missing
- Argus
- ArisLocker
- Armageddon
- Arsium
- Assembly
- Ataware
- AtomSilo
- Aurora
- Australian-AES
- AutoTRON
- AutoWannaCryV2
- Auuahk-Ouuohk
- Avaddon
- AVCrypt
- Avest
- AvGhost
- AvosLocker
- B2DR
- Babax
- Babuk
- BabyDuck
- Badbeeteam
- Bagli
- Balaclava
- Baliluware
- Bam!
- BananaCrypt
- Banks1
- BansomQare Manna
- BarakaTeam
- Basilisque Locker
- BB
- BeijingCrypt
- BestChangeRu
- BianLian
- BigBobRoss
- BigBossHorse
- BigEyes
- BigLock
- Birbware
- Bisquilla
- Bit
- BitCrypt
- BitPyLock
- BizHack
- BKRansomware
- Black Worm
- BlackBasta
- BlackByte
- BlackCat
- BlackClaw
- BlackCocaine
- BlackFireEye
- BlackHat-Mehtihack
- BlackHeart
- BlackKingdom
- BlackMatter
- BlackMoon
- BlackPink
- BlackRuby
- BlackRuby-2
- BlackSun
- Blank
- Blaze
- Blitzkrieg
- Blocky
- BlockZ
- BloodJaws
- BlueCheeser
- BlueEagle
- BlueLocker
- Bluerose
- BlueSky
- Bonsoir
- BooM
- BoooamCrypt
- Boris HT
- BRCrypt
- Brick
- BrickR
- BtcKING
- Bug
- BulbaCrypt
- Buran
- BWall
- ByteLocker
- C0hen
- Cassetto
- CCECrypt
- Cephalo
- Cerber
- Cerber 2
- Charmant
- CheckMail7
- CheckMate
- Chekyshka
- ChernoLocker
- ChiChi
- ChinaJm
- Chinese Coffee
- ChineseRarypt
- ChupaCabra
- Cincoo
- Clay
- Clop
- CmdRansomware
- CNH
- CobraLocker
- CoderCrypt
- Combo13
- CommonRansom
- Consciousness
- Conti
- Conti-2
- Coom
- Corona
- CoronaVirus
- Cossy
- CovidLocker
- Cr1ptT0r
- Craftul
- CrazyCrypt
- CreamPie
- Creeper
- Creepy
- Cring
- Cripto Py
- CriptomanGizmo
- Cripton7zp
- CruelCrypt
- CryBrazil
- CryCipher
- CryDroid
- Crypt0r
- Crypt32
- CryptGh0st
- Crypto_Lab
- CryptoDarkRubix
- CryptoGod 2018
- CryptoHauler
- CryptoJoker 2019
- CryptoJoker 2020
- CryptoLite
- CryptoMix-Backup
- CryptoMix-DLL
- CryptoNar
- CryptoPatronum
- CryptoPokemon
- Cryptre
- CrypTron
- CryptXXX
- CrystalCrypt
- CryT0Y
- CryTekk
- CSP
- Cuba
- Curator
- CuteKitty
- CXK-NMSL
- CyberResearcher
- CyberSCCP
- CyberThanos
- Cyborg
- Cyrat
- Cyron
- Cyspt
- D00mEd
- D3adCrypt
- Dablio
- DarkSide
- DataBankasi
- DataKeeper
- Datastor2021
- DCRTR
- DCRTR-WDM
- DDE
- DeadBolt
- DearCry
- DeathHiddenTear
- DeathNote
- DeathOfShadow
- DECAF
- DEcovid19
- Decr1pt
- DecryptFox
- DecryptIomega
- DecryptmyfilesTop
- DecYourData
- Defender
- Defray777
- Delphimorix!
- Delta
- DeroHE
- Desktop
- Desync
- Devos
- Diavol
- Different Jigsaw
- Dishwasher
- District
- Django
- Dodger
- DogeCrypt
- Doitman
- DonnaRenniCrypt
- Dont_Worry
- Donut
- DoppelPaymer
- DotNoData
- DotZeroCMD
- Doyuk
- DragonCyber
- Drakos
- Dreamon
- DriedSister
- DRV
- DST
- DualShot
- Ducky
- Dusk
- EAF
- EbolaRnsmwr
- EduRansom
- EGG
- Egregor
- Ekati
- El
- Enc1
- Enced
- EncFileSOS
- EncodeBat
- Encoded01
- EncoderCSL
- Encrp
- EncryptedBatch
- EncryptServer2018
- Ensiko
- EnybenyCrypt
- EOEO
- Epoblockl
- Epsilon
- Epsilon Red
- Eq
- Erica
- Eris
- Esmeralda
- Estemani
- Eternal
- Euclid
- Everbe
- EvilNominatus
- Evolution
- Exerwa
- Exocrypt XTC
- Exorcist
- ExpBoot
- EZDZ
- FarAttack
- FastWind
- FBLocker
- FCrypt
- FCT
- FileEngineering
- FileFuck
- FilesL0cker
- FindNoteFile
- FiveHands
- Flamingo
- FlowEncrypt
- FonixCrypter
- FORMA
- FreeMe
- Frog
- FRS
- FScrypt
- FTCODE
- FuxSocy
- FXS
- Galacti-Crypter
- GameOver
- GAmmA
- GandCrab
- GandCrab-2
- GandCrab-3
- GandCrab-4
- GandCrab-5
- GarrantyDecrypt
- Geminis3
- Geneve
- Gerber
- GermanWiper
- GetCrypt
- GetYourFilesBack
- Ghostbin
- GhosTEncryptor
- GhostHammer
- Gibberish
- Giyotin
- Gladius
- GoCryptoLocker
- Godsomware
- GoGoogle
- GoHack
- Golden Axe
- GoNNaCrypt
- Good
- GoodMorning
- GoodWill
- Gopher
- GoRansom
- Gorgon
- Gotcha
- GottaCry
- GPGQwerty
- Greystars
- GrujaRSorium
- GusCrypter
- H34rtBl33d
- HackdoorCrypt3r
- Hades
- Haha
- Hakbit
- Hamster
- Hansom
- HANTA
- HardBit
- HDLocker
- HDMR
- HE-HELP
- Hello
- HelloKitty
- HelloXD
- Hentai Oniichan
- Herbst
- Hermes837
- HermesVirus HT
- Hermetic
- HildaCrypt
- Hive
- Hog
- HolyGhost
- Homemade
- HotCoffee
- HowAreYou
- HQ_52_42
- HR
- Hydra
- IceFire
- Ims00ry
- Indrik
- InfoDot
- InstallPay
- IQ
- Ironcat
- Is
- IziCrypt
- Jackpot
- James
- Jamper
- Janelle
- Japan
- Javalocker
- JavaRatty
- JCry
- JCrypt
- Jeno
- Jesus
- JesusCrypt
- JiangLocker
- JNEC.a
- JoeGo
- JohnBorn
- JoJoCrypter
- Joker Korean
- Jormungand
- JSWorm
- Judge
- Juwon
- Kanalia
- Kangaroo
- Karen
- KarmaCypher
- KEKW
- Kelly
- KesLan
- KhalsaCrypt
- Khonsari
- Knot
- Koxic
- Kupidon
- LCRY
- Leakthemall
- LickyAgent
- Lilith
- Lilocked
- Litra
- LockDown
- Lockedv1
- LockerGoga
- LockFile
- LockTaiwan
- Loki
- LokiLocker
- Lola
- LolKek
- LonleyCrypt
- LooCipher
- Lost_Files
- LuciferCrypt
- Lucky
- Lucky-Сhinese
- LuckyJoe
- LV
- M@r1a
- MainBat
- Major
- Makop
- MaMoCrypter
- Maoloa
- Marozka
- MarraCrypt
- Mars
- Matryoshka
- Maui
- Maze
- Mcburglar
- MedusaLocker
- MegaCortex
- MegaLocker
- Mermaid,
- Mespinoza
- MetadataBin
- Mew767
- MicroCop
- Mijnal
- Mike NotSTOP!
- MilkmanVictory
- Mobef-JustFun
- MonaLisa
- Montserrat
- MorrisBatchCrypt
- Motocos
- MountLocker
- Mr.Robot
- MRAC
- MuchLove
- Muhstik
- MXX
- MZP
- N2019cov
- N3TW0RM
- Namaste
- NAS Data Compromiser
- NB65
- Nefilim
- Nemty
- Netwalker
- NewWave
- NextCry
- Nibiru 2020
- NightSky
- Nitro
- NoCry
- Nodera
- NoHope
- Nokoyawa
- Nomikon
- NotRansomCryptoLock
- NoWay
- Nyton
- OCT
- OhNo-FakePDF
- OmniSphere
- ONYX
- OnyxLocker
- Orion
- Osno
- OutCrypt
- Owl
- Pacman
- Pandora
- Panther
- Parasite
- Pashka
- PassLock
- Pay-or-Lost
- Pay2Decrypt
- Pay2Key
- PayDay
- Paymen45
- Paypalfree
- PencilCry
- Penta
- PewPew
- Phantom
- PhantomChina
- PhobosImposter
- PhoneNumber
- Pipikaki
- Pizhon
- PL
- Plague17 (2014-2016)
- Plague17 (2018-2019)
- Play
- Pojie
- Polaris
- PoliceRecords
- Pony
- PonyFinal
- Poteston
- Povlsomware
- PowerHentai
- PPDDDP
- Prestige
- Problem
- Proced
- Project Root
- Project23
- ProLock
- Prometey
- Prometheus
- PulpFictionQuote
- Pump
- PureLocker
- PwndLocker, KeyLocker
- Pxj
- PyAesCrypt
- PyCipher 2022
- PyLock
- PyPayroll
- PZDC
- QNAPCrypt
- Quantum Locker
- QuiDDoss
- Rabbit
- RabbitFox
- RagnarLocker
- Ragnarok
- Random30
- RandomRansom
- Ranesomware
- RansomBlox
- RansomBoggs
- RansomEXX
- RansomNow
- Raptor
- RCRU64
- Recon
- RedAlert
- Redeemer
- Redkeeper
- RedRoman
- RedRum
- RedTeam
- RegretLocker
- RekenSom
- Relock
- RenameX12
- Rentyr
- RetMyData
- Rever
- Rhino
- RNS
- RobbinHood
- RobinHood
- Robux
- Rogue HT
- Rontok
- Rook
- Royal
- RU_Ransom
- RunExeMemory
- RunSomeAware
- Russenger
- Ryuk.Net
- Sabbath
- SadComputer
- Sadogo
- Salma
- SantaCrypt
- SanwaiCrypt
- Sapphire
- Sapphire-LAG
- SatanCryptor Go
- Saved
- SaveTheQueen
- SayLess
- ScammerLocker Py
- Scarab 2019
- Scarab 2020-2022
- ScareCrow
- ScatterBrain
- SD
- Sekhmet
- SEND.ID.TO
- SepSys
- Sfile
- Shadi
- ShadowCryptor
- ShkolotaCrypt
- SifreCikis
- SifreCozucu
- Sifreli 2019
- SilentDeath
- Silvertor
- Skynet
- SkyStars
- Slam
- SlankCryptor
- Smaug
- Snake-Ekans
- SnapDragon
- Sodinokibi
- Sojusz
- Solider
- Solve
- Somik1
- SpartCrypt
- Sphinx
- Spider Py
- Spiteful Doubletake
- SplinterJoke
- Spyro
- Steel
- Stop247
- StopWarInUkraine
- Such_Crypt
- Sun
- Suncrypt 2020
- Surtr
- Syrk
- SystemCrypter
- SZ40
- T1Happy
- TapPiF
- TaRRaK
- TechandStrat
- TellYouThePass
- Teslarvng
- TFlower
- TheCursedMurderer
- TheDMR
- ThunderX
- TimeCrypt
- TimeTime
- Tohnichi
- TomNom
- Tongda
- TorLocker
- Tortoise
- Trap
- Triple Dollar Signs ($$$)
- Tripoli
- TrumpHead
- Try2Cry
- TurkStatik
- TuskLocker
- TxLocker
- Udacha
- Uh-Oh
- UkrainianBug
- UltraCrypter
- Unibovwood
- Unit09
- Unlocker
- UnluckyWare
- UNNAM3D
- Vaca
- Vaggen
- VanGoth
- VCrypt
- Vega
- Venom
- Venus
- VHD
- Viagra
- VietnamPav
- VoidCrypt
- Vovalex
- Vulston
- Wacatac
- Waiting
- Waldo
- Wana-XD
- WannaBitcoin
- WannaCry
- WannaCry Fake
- WannaOof
- WannaRen
- WannerCry
- WaspLocker
- WastedBit
- WastedLocker
- Wesker
- WhiteBlackCrypt
- WhiteRabbit
- WhoLocker
- WinCrypto
- Wintenzz
- WinWord64
- WoodRat
- WowSmithAgain
- WsIR
- Wulfric
- WyvernLocker
- XCry
- XerXes
- XMRLocker
- Xorist 2020
- Xorist-Mcrypt2019
- XP10
- XYZconfig
- YanluoWang
- Yatron
- YobaCrypt
- Yogynicof
- YYYYBJQOQDU
- Z3
- Zeon
- Zeoticus
- Zeppelin
- Zero-Fucks
- Zeronine
- Zeropadypt
- Zhen
- Ziggy
- Zorab
- ZorgoCry
- ZQ
Subscribe To New Ransomware Research
Sign up to receive updates when new threats are identified. Stay on top of the latest research.