Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks
Gain programmatic access to ransomware victim data, group details, cyberattacks, and intelligence.
Base URL: https://api.ransomware.live/v2
Authentication: No authentication is required to use the Ransomware.live API. All endpoints are publicly accessible. However, usage may be rate-limited to ensure fair access and platform stability.
| Method | Endpoint | Description |
|---|---|---|
| GET | /info | Basic API metadata |
| GET | /recentvictims | Latest disclosed victims |
| GET | /group/<group_name> | Details about a specific group |
| GET | /groups | List of all ransomware groups |
| GET | /allcyberattacks | All known cyberattacks |
| GET | /recentcyberattacks | Recently added cyberattacks |
| GET | /groupvictims/<group_name> | Victims claimed by a group |
| GET | /searchvictims/<keyword> | Search for victims by keyword |
| GET | /countrycyberattacks/<code> | Cyberattacks in a country (ISO2) |
| GET | /countryvictims/<code> | Victims in a specific country |
| GET | /victims/<year>/<month> | Victims by year and month |
| GET | /sectorvictims/<sector> | Victims in a sector |
| GET | /sectorvictims/<sector>/<countrycode> | Victims in a sector and country |
| GET | /certs/<country_code> | National CERT contact for a country |
| GET | /yara/<group_name> | YARA rules associated with a group |
Built with ❤️ by Ransomware.live. For help, contact us.