Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business
Gain programmatic access to ransomware victim data, group details, cyberattacks, and intelligence.
Base URL: https://api.ransomware.live/v2
Authentication: No authentication is required to use the Ransomware.live API. All endpoints are publicly accessible. However, usage may be rate-limited to ensure fair access and platform stability.
| Method | Endpoint | Description |
|---|---|---|
| GET | /info | Basic API metadata |
| GET | /recentvictims | Latest disclosed victims |
| GET | /group/<group_name> | Details about a specific group |
| GET | /groups | List of all ransomware groups |
| GET | /allcyberattacks | All known cyberattacks |
| GET | /recentcyberattacks | Recently added cyberattacks |
| GET | /groupvictims/<group_name> | Victims claimed by a group |
| GET | /searchvictims/<keyword> | Search for victims by keyword |
| GET | /countrycyberattacks/<code> | Cyberattacks in a country (ISO2) |
| GET | /countryvictims/<code> | Victims in a specific country |
| GET | /victims/<year>/<month> | Victims by year and month |
| GET | /sectorvictims/<sector> | Victims in a sector |
| GET | /sectorvictims/<sector>/<countrycode> | Victims in a sector and country |
| GET | /certs/<country_code> | National CERT contact for a country |
| GET | /yara/<group_name> | YARA rules associated with a group |
Built with ❤️ by Ransomware.live. For help, contact us.