Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Ransomware.live API Documentation (v2)

Gain programmatic access to ransomware victim data, group details, cyberattacks, and intelligence.
Base URL: https://api.ransomware.live/v2

Sample Fields in Victim Records

Authentication: No authentication is required to use the Ransomware.live API. All endpoints are publicly accessible. However, usage may be rate-limited to ensure fair access and platform stability.

Available Endpoints
Method Endpoint Description
GET/infoBasic API metadata
GET/recentvictimsLatest disclosed victims
GET/group/<group_name>Details about a specific group
GET/groupsList of all ransomware groups
GET/allcyberattacksAll known cyberattacks
GET/recentcyberattacksRecently added cyberattacks
GET/groupvictims/<group_name>Victims claimed by a group
GET/searchvictims/<keyword>Search for victims by keyword
GET/countrycyberattacks/<code>Cyberattacks in a country (ISO2)
GET/countryvictims/<code>Victims in a specific country
GET/victims/<year>/<month>Victims by year and month
GET/sectorvictims/<sector>Victims in a sector
GET/sectorvictims/<sector>/<countrycode>Victims in a sector and country
GET/certs/<country_code>National CERT contact for a country
GET/yara/<group_name>YARA rules associated with a group
Error Handling

Built with ❤️ by Ransomware.live. For help, contact us.