Elastio Cyber Recovery
Ransomware Research
Elastio security team analyzes new ransomware strains to include in its machine learning engine, updating databases with new threats when identified and including them in recovery point scans.
Below is a list of detected or researched ransomware strains. For further information on origins, genealogy, behavior, and characteristics, click on an individual strain.
- 010001
- 05250lock
- 0XXX
- 1337-Locker
- 16x
- 20dfs
- 24H
- 32aa
- 3nCRY
- 4rw5w
- 5ss5c
- 64-Random-HEX
- 7z Portuguese
- 7zipper
- AAC
- ABCD
- ABCLocker
- Ace
- Acepy
- Admin Locker
- Adonis
- AepCrypt
- AES-Matrix
- AES-NI: April Edition
- AESMew
- Afrodita
- AgeLocker
- Agenda
- Ahihi
- Ako
- Alco
- AllCry
- AlldataLocker
- AllDataStolen
- Allrighty
- AlphaBetaCrypt
- AMBA
- Amjixius
- Amnesia
- Amnesia2
- Amogus
- Anatova
- AnDROid
- AngleWare
- AngryKite
- AnimusLocker
- Annabelle
- Annabelle 2.1
- AnonCrack
- AnonFive
- AnteFrigus
- Anti-DDos
- AntiWar
- Anton-Artemon
- Anubi NotBTCWare
- Aperfectday2018
- Apis
- Apocalypse
- Apocalypse-Missing
- ApolloLocker
- Argus
- ArisLocker
- Armage
- Armageddon
- ArmaLocky
- Arsium
- AslaHora
- Assembly
- Ataware
- Atchbo
- ATLAS
- AtomSilo
- Aurora
- Australian-AES
- AutoEncryptor
- AutoTRON
- AutoWannaCryV2
- Auuahk-Ouuohk
- Avaddon
- AvastVirusinfo
- AVCrypt
- Avest
- AvGhost
- AvosLocker
- B2DR
- Babax
- Babuk
- BabyDuck
- Bad Rabbit
- Badbeeteam
- Bagli
- Balaclava
- Balbaz
- Baliluware
- Bam!
- BananaCrypt
- BancoCrypt HT
- Banks1
- BansomQare Manna
- BarakaTeam
- BarRaxCrypt
- Basilisque Locker
- BASS-FES
- BB
- BeethoveN
- BeijingCrypt
- BestChangeRu
- BianLian
- BigBobRoss
- BigBossHorse
- BigEyes
- BigLock
- Birbware
- Bisquilla
- Bit
- Bitcoin666
- BitCrypt
- BitKangoroo
- Bitpaymer
- BitPyLock
- Bitshifter
- BizHack
- BKRansomware
- Black Worm
- BlackBasta
- BlackByte
- BlackCat
- BlackClaw
- BlackCocaine
- BlackFireEye
- Blackhat
- BlackHat-Mehtihack
- BlackHeart
- BlackKingdom
- BlackMatter
- BlackMist
- BlackMoon
- Blackout
- BlackPink
- BlackRuby
- BlackRuby-2
- BlackSheep
- BlackSun
- Blank
- Blind
- Blind-Napoleon
- Blitzkrieg
- BlockFile12
- Blocky
- BlockZ
- BloodJaws
- Blooper
- BlueCheeser
- BlueEagle
- BlueLocker
- Bluerose
- BlueSky
- Bonsoir
- BooM
- BoooamCrypt
- Boris HT
- BrainLag
- BRansomware
- BRCrypt
- Brick
- BrickR
- BTC-azadi
- BTCamant
- BtcKING
- BTCWare
- BTCWare-Aleta
- BTCWare-Gryphon
- BTCWare-Nuclear
- BTCWare-PayDay
- Bubble
- Bud
- Bug
- BugWare
- BulbaCrypt
- Buran
- BWall
- ByteLocker
- C0hen
- Cancer
- Cassetto
- CCECrypt
- Cephalo
- Cerber
- Cerber 2
- Cerberos
- Charmant
- CheckMail7
- CheckMate
- Chekyshka
- ChernoLocker
- ChiChi
- ChinaJm
- ChinaYunLong
- Chinese Coffee
- ChineseRarypt
- ChupaCabra
- Cincoo
- Clay
- ClicoCrypter
- Clop
- Clouded
- CloudSword
- CmdRansomware
- CNH
- CobraLocker
- CoderCrypt
- Combo13
- CommonRansom
- Comrade HT
- CoNFicker
- Consciousness
- ConsoleApplication1
- Conti
- Conti-2
- Coom
- Corona
- CoronaVirus
- CorruptCrypt
- Cossy
- CovidLocker
- Cr1ptT0r
- CradleCore
- Craftul
- CrazyCrypt
- CreamPie
- Creeper
- Cring
- Cripto Py
- CriptomanGizmo
- Cripton7zp
- CrptXXX
- CruelCrypt
- CrY-TrOwX
- Cry36
- Cry9
- CryBrazil
- CryCipher
- CryDroid
- CryForMe
- Crying
- CryMore
- Cryp70n1c
- Crypt0 HT
- Crypt0r
- Crypt12
- Crypt32
- CryptConsole 1.0
- CryptConsole-2
- CryptConsole-2018
- CryptGh0st
- Crypto_Lab
- Crypto-Blocker
- CryptoBoss
- CryptoClone
- CryptoDark
- CryptoDarkRubix
- CryptoDevil
- CryptoGod
- CryptoGod 2018
- CryptoHauler
- CryptoJacky
- CryptoJoker 2017
- CryptoJoker 2019
- CryptoJoker 2020
- CryptoKill
- CryptoLite
- CryptoLocker by NTK
- CryptolockerEmulator
- CryptoManiac
- CryptoMix-0000
- CryptoMix-Arena
- CryptoMix-Azer
- CryptoMix-Backup
- CryptoMix-CK
- CryptoMix-Coban
- CryptoMix-DLL
- CryptoMix-Empty
- CryptoMix-Error
- CryptoMix-Exte
- CryptoMix-SERVER
- CryptoMix-System
- CryptoMix-x1881
- CryptoNar
- CryptoPatronum
- CryptoPokemon
- CryptoShield 1.0
- CryptoShield 2.0
- CryptoSomware
- CryptoSpider
- CryptoSweetTooth
- Cryptoviki
- Cryptre
- CrypTron
- CryptXXX
- Crystal
- CrystalCrypt
- CryT0Y
- CryTekk
- CSP
- CTF
- Cuba
- Curator
- Curumim
- CuteKitty
- CVLocker
- CXK-NMSL
- Cyber Police HT
- CyberDrill2
- CyberResearcher
- CyberSCCP
- CyberSoldier
- CyberThanos
- Cyborg
- Cyclone
- CypherPy
- Cyrat
- Cyron
- Cyspt
- D00mEd
- D3adCrypt
- Dablio
- Damage
- Damoclis gladius
- Dangerous
- DarkKomet
- DarkLocker
- DarkoderCryptor
- DarkSide
- DataBankasi
- DataKeeper
- Datastor2021
- DCRTR
- DCRTR-WDM
- DCry
- DDE
- DeadBolt
- DeadSec-Crypto
- DearCry
- DeathHiddenTear
- DeathNote
- DeathOfShadow
- DECAF
- DEcovid19
- Decr1pt
- DecryptFox
- DecryptIomega
- DecryptmyfilesTop
- DecYourData
- Defender
- Defray
- Defray777
- Delphimorix!
- Delta
- Deos
- DeroHE
- Desktop
- Desync
- Devos
- Diamond
- Diavol
- Different Jigsaw
- DilmaLocker
- Dishwasher
- District
- Django
- Dodger
- DogeCrypt
- Doitman
- DolphinTear
- Donation1
- DonnaRenniCrypt
- DoNotChange
- DoNotOpen
- Dont_Worry
- Donut
- DoppelPaymer
- DotNoData
- DotRansomware
- DotZeroCMD
- DoubleLocker
- Doyuk
- DragonCyber
- Drakos
- Dreamon
- DriedSister
- DRV
- DST
- DualShot
- Ducky
- DUMB
- Dusk
- Dviide
- DynA-Crypt
- EbolaRnsmwr
- EdgeLocker
- EduRansom
- EGG
- Egregor
- Ekati
- El
- Enc1
- Enced
- EncFileSOS
- EncodeBat
- Encoded01
- EncoderCSL
- Encrp
- EnCrypt
- EncryptedBatch
- EncryptServer2018
- Enjey Crypter
- Ensiko
- EnybenyCrypt
- EOEO
- Epoblockl
- Epsilon
- Epsilon Red
- Eq
- Erebus 2017
- Erica
- Eris
- Esmeralda
- Estemani
- Eternal
- Eternity
- Euclid
- Evasive HT
- Everbe
- Evil
- EvilNominatus
- Evolution
- Executioner
- ExecutionerPlus
- Exerwa
- Exocrypt XTC
- ExoLock
- Exorcist
- ExpBoot
- Explorer
- Extractor
- EZDZ
- FarAttack
- FastWind
- FBLocker
- FCrypt
- FCT
- FileEngineering
- FileFuck
- FilesL0cker
- FindNoteFile
- FireCrypt
- FiveHands
- Flamingo
- FlowEncrypt
- FonixCrypter
- FORMA
- FreeMe
- Frog
- FRS
- FScrypt
- FTCODE
- FuxSocy
- FXS
- Galacti-Crypter
- GameOver
- GAmmA
- GandCrab
- GandCrab-2
- GandCrab-3
- GandCrab-4
- GandCrab-5
- GarrantyDecrypt
- Geminis3
- Geneve
- Gerber
- GermanWiper
- GetCrypt
- GetYourFilesBack
- Ghostbin
- GhosTEncryptor
- GhostHammer
- Gibberish
- Giyotin
- Gladius
- GoCryptoLocker
- Godsomware
- GoGoogle
- GoHack
- Golden Axe
- GoNNaCrypt
- Good
- GoodMorning
- GoodWill
- Gopher
- GoRansom
- Gorgon
- Gotcha
- GottaCry
- GPGQwerty
- Greystars
- GrujaRSorium
- GusCrypter
- H34rtBl33d
- HackdoorCrypt3r
- HacknutCrypt
- Hades
- Haha
- Hakbit
- Hamster
- Hansom
- HANTA
- HardBit
- HDLocker
- HDMR
- HE-HELP
- Hello
- HelloKitty
- HelloXD
- Hentai Oniichan
- Herbst
- Hermes837
- HermesVirus HT
- Hermetic
- Heropoint
- HiddenBeer
- HildaCrypt
- Hive
- Hog
- HolyGhost
- Homemade
- Honor
- Horros
- HotCoffee
- HowAreYou
- HQ_52_42
- HR
- Hydra
- IceFire
- IEncrypt
- Ims00ry
- Indrik
- InducVirus
- InfoDot
- InsaneCrypt
- InstallPay
- IQ
- Iron
- Ironcat
- Is
- IT.Books
- IziCrypt
- JabaCrypter
- Jackpot
- Jaffe
- James
- Jamper
- Janelle
- Japan
- Java NotDharma
- Javalocker
- JavaRatty
- JCry
- JCrypt
- Jemd
- Jeno
- Jesus
- JesusCrypt
- JiangLocker
- JNEC.a
- JoeGo
- JohnBorn
- JoJoCrypter
- Joker Korean
- Jormungand
- JosepCrypt
- JSWorm
- Judge
- JungleSec
- Juwon
- Kali
- Kanalia
- Kangaroo
- Karen
- KarmaCypher
- Katyusha
- KCTF Locker
- KCW
- KEKW
- Kelly
- KesLan
- KhalsaCrypt
- Khonsari
- KillBot_Virus
- KillRabbit
- KingOuroboros
- Knot
- KoreanLocker
- Koxic
- Kraken Cryptor
- Krypton
- Kupidon
- Ladon
- LanRan-2
- LazagneCrypt
- LCRY
- Leakthemall
- LickyAgent
- LIGMA
- Lilith
- Lilocked
- Litra
- LittleFinger
- Locdoor
- LockDown
- Lockedv1
- LockerGoga
- LockFile
- LockMe
- LockTaiwan
- Locky-Diablo6
- Loki
- LokiLocker
- Lola
- LolKek
- LongTermMemoryLoss
- LonleyCrypt
- LooCipher
- Lost_Files
- LuciferCrypt
- Lucky
- Lucky-Сhinese
- LuckyJoe
- LV
- M@r1a
- MAFIA
- Magician
- MainBat
- Major
- Makop
- MaMoCrypter
- Maoloa
- Marozka
- MarraCrypt
- Mars
- Matryoshka
- Maui
- MauriGo
- Maze
- Mcburglar
- Medusa Stealer
- MedusaLocker
- Meduza
- MegaCortex
- MegaLocker
- Mercury
- Mermaid,
- Mespinoza
- MetadataBin
- Mew767
- MicroCop
- Mijnal
- Mike NotSTOP!
- MilkmanVictory
- MindLost
- Minotaur
- Mobef-JustFun
- Mobef-Salam
- MonaLisa
- MoneroPay
- Montserrat
- MorrisBatchCrypt
- Motocos
- MountLocker
- Mr.Dec
- Mr.Robot
- MRAC
- MuchLove
- Muhstik
- MXX
- MZP
- N2019cov
- N3TW0RM
- Namaste
- NAS Data Compromiser
- NazCrypt
- NB65
- Nefilim
- Nemty
- Netwalker
- NewWave
- NextCry
- Nibiru 2020
- NightSky
- Nitro
- NoCry
- Nodera
- Nog4yH4n
- NoHope
- Nokoyawa
- Nomikon
- NotRansomCryptoLock
- NoWay
- Nozelesn
- Nyton
- OCT
- OhNo-FakePDF
- OmniSphere
- ONI
- ONYX
- OnyxLocker
- OPdailyaallowance
- Orion
- Osno
- OutCrypt
- Outsider
- Owl
- Pacman
- Pandora
- Panther
- Parasite
- Pashka
- PassLock
- Pay-or-Lost
- Pay2Decrypt
- Pay2Key
- Pay2Unlock
- PayDay
- Paymen45
- Paypalfree
- PencilCry
- Penta
- Peosaj
- PewCrypt
- PewDiePie
- PewPew
- PGPSnippet
- Phantom
- PhantomChina
- PhobosImposter
- PhoneNumber
- Pipikaki
- Pizhon
- PL
- Plague17 (2014-2016)
- Plague17 (2018-2019)
- Play
- PoisonFang
- Pojie
- Polaris
- PoliceRecords
- PolyglotCryptor
- Pony
- PonyFinal
- PooleZoor
- Poteston
- Povlsomware
- PowerHentai
- PPDDDP
- Predator
- Prestige
- Princess Locker-2
- PrincessLocker Evolution
- Problem
- Proced
- Project Root
- Project23
- Project57
- ProLock
- Prometey
- Prometheus
- Proxima
- PTP
- PUBG
- PulpFictionQuote
- Pump
- PureLocker
- PwndLocker, KeyLocker
- Pxj
- PyAesCrypt
- PyCipher 2022
- PyLock
- PyLocky
- PyPayroll
- PZDC
- Qinynore
- QNAPCrypt
- QP
- Quantum Locker
- QuiDDoss
- QwertyCrypt
- Rabbit
- RabbitFox
- RagnarLocker
- Ragnarok
- Random30
- RandomLocker
- RandomRansom
- Ranesomware
- Ransom102
- RansomAES
- RansomBlox
- RansomBoggs
- RansomEXX
- RansomNow
- RansomUserLocker
- RansomWarrior
- Rapid
- Rapid-2
- Rapid-3
- Raptor
- RaRansomware
- RaRuCrypt
- RCRU64
- Recon
- RedAlert
- Redeemer
- RedEye
- Redkeeper
- RedRoman
- RedRum
- RedTeam
- RegretLocker
- RekenSom
- Rektware
- Relock
- RenameX12
- Rentyr
- RetMyData
- Rever
- Rhino
- RNS
- RobbinHood
- RobinHood
- Robux
- Rogue HT
- Rontok
- Rook
- RootFinder
- Royal
- RU_Ransom
- RunExeMemory
- RunSomeAware
- Russenger
- Ryuk
- Ryuk.Net
- Sabbath
- SadComputer
- Sadogo
- Salma
- SantaCrypt
- SanwaiCrypt
- Sapphire
- Sapphire-LAG
- SARansom
- SatanCryptor Go
- Saturn
- Satyr
- Saved
- SaveTheQueen
- SayLess
- ScammerLocker
- ScammerLocker Py
- Scarab 2019
- Scarab 2020-2022
- Scarab-Amnesia
- Scarab-Aztec
- Scarab-Barracuda
- Scarab-Bin
- Scarab-Bitcoin
- Scarab-Bomber
- Scarab-Crypt000
- Scarab-Crypto
- Scarab-CyberGod
- Scarab-Danger
- Scarab-DiskDoctor
- Scarab-Enter
- Scarab-Horsia
- Scarab-Oblivion
- Scarab-Omerta
- Scarab-Osk
- Scarab-Please
- Scarab-Rebus
- Scarab-Recovery
- Scarab-Turkish
- Scarab-Walker
- Scarab-XTBL
- ScareCrow
- ScatterBrain
- Scrabber
- Scroboscope
- SD
- Sekhmet
- SEND.ID.TO
- Seon
- Sepsis
- SepSys
- Sfile
- Shadi
- ShadowCryptor
- ShivaGood
- ShkolotaCrypt
- Shrug
- ShutUpAndDance
- SifreCikis
- SifreCozucu
- Sifreli 2019
- Sigrun
- SilentDeath
- SilentSpring
- Silvertor
- SkyFile
- Skynet
- SkyStars
- Slam
- SlankCryptor
- Smaug
- Snake-Ekans
- SnapDragon
- Snatch
- SnowPicnic
- Sodinokibi
- Sojusz
- Solider
- SOLO
- Solve
- Somik1
- Sorry HT
- Spartacus
- SpartCrypt
- Sphinx
- Spider Py
- Spiteful Doubletake
- SplinterJoke
- Spyro
- Steel
- Stinger
- Stop247
- StopWarInUkraine
- Styver
- Such_Crypt
- Sun
- Suncrypt 2020
- Suri
- Surtr
- SymmyWare
- Syrk
- SYSDOWN
- SystemCrypter
- SZ40
- T1Happy
- TapPiF
- TaRRaK
- Tear Dr0p
- TechandStrat
- TellYouThePass
- Termite
- Teslarvng
- TFlower
- Thanatos
- The Brotherhood
- TheCursedMurderer
- TheDMR
- ThunderX
- TimeCrypt
- TimeTime
- Tohnichi
- TomNom
- Tongda
- TorLocker
- Tortoise
- TotalWipeOut
- Trap
- Triple Dollar Signs ($$$)
- Tripoli
- Tron
- TrumpHead
- Try2Cry
- Tunca
- TurkStatik
- TuskLocker
- TxLocker
- Udacha
- Uh-Oh
- UkrainianBug
- UltraCrypter
- Unibovwood
- Unit09
- Unlock92 Zipper
- Unlocker
- UnluckyWare
- UNNAM3D
- Unnamed Bin
- UselessDisk
Subscribe To New Ransomware Research
Sign up to receive updates when new threats are identified. Stay on top of the latest research.