Bitcoin payments tracked to known ransomware wallets.
Total Paid
$1019M+
Transactions
21,802
Families Tracked
136
| Family | Total USD | BTC | Transactions | First Seen | Last Seen |
|---|---|---|---|---|---|
| Unlabeled | $682.1M | 45,519.34 | 862 | 2016-06 | 2023-12 |
| Conti | $101.6M | 9,035.62 | 133 | 2017-12 | 2022-06 |
| Cuba | $60.2M | 2,018.04 | 18 | 2020-02 | 2022-06 |
| Netwalker (Mailto) | $27.5M | 3,029.49 | 514 | 2019-11 | 2021-05 |
| BlackSuit | $25.0M | 390.17 | 3 | 2024-06 | 2024-06 |
| BlackCat | $21.9M | 1,401.7 | 1 | 2024-03 | 2024-03 |
| Locky | $14.0M | 16,244.52 | 10,411 | 2016-01 | 2017-04 |
| REvil / Sodinokibi | $12.1M | 327.42 | 9 | 2020-01 | 2021-06 |
| RagnarLocker | $10.9M | 528.37 | 9 | 2020-07 | 2021-05 |
| DarkSide | $9.1M | 158.71 | 4 | 2021-02 | 2021-05 |
| Maui | $8.8M | 1,141.64 | 2,216 | 2018-09 | 2022-12 |
| MedusaLocker | $5.5M | 340.11 | 795 | 2019-01 | 2022-10 |
| Karakurt | $5.0M | 116.69 | 27 | 2021-09 | 2022-09 |
| Ryuk | $4.6M | 820.11 | 55 | 2018-08 | 2019-12 |
| MountLocker | $4.2M | 298.5 | 2 | 2020-11 | 2020-11 |
| BlackMatter | $4.1M | 96.39 | 2 | 2021-07 | 2021-07 |
| Akira | $4.0M | 111.68 | 24 | 2023-07 | 2024-09 |
| Razy | $3.5M | 29,679.6 | 1,787 | 2013-10 | 2021-09 |
| Egregor | $3.1M | 197.96 | 9 | 2020-10 | 2020-12 |
| darkangels | $1.5M | 38.14 | 2 | 2022-05 | 2022-05 |
| LockBit | $1.2M | 59.15 | 11 | 2020-12 | 2022-09 |
| Bitpaymer / DoppelPaymer | $1.1M | 90 | 2 | 2020-08 | 2020-08 |
| DMALockerv3 | $1.1M | 1,130.61 | 158 | 2016-09 | 2017-09 |
| HelloKitty | $1.1M | 32.35 | 2 | 2021-07 | 2021-07 |
| Black Basta | $0.8M | 45.2 | 4 | 2022-10 | 2022-12 |
| Hive | $0.6M | 35.04 | 2 | 2022-11 | 2022-11 |
| SynAck | $0.5M | 330.82 | 496 | 2015-03 | 2018-01 |
| Qlocker | $0.5M | 9.13 | 917 | 2021-04 | 2021-06 |
| SamSam | $0.4M | 501.2 | 65 | 2016-01 | 2017-06 |
| Quantum | $0.4M | 12.69 | 1 | 2022-06 | 2022-06 |
| GlobeImposter | $0.3M | 594.42 | 104 | 2014-11 | 2017-12 |
| Makop | $0.3M | 7.21 | 114 | 2021-05 | 2021-08 |
| SunCrypt | $0.2M | 7.45 | 1 | 2021-07 | 2021-07 |
| AES-NI | $0.2M | 103.58 | 698 | 2014-06 | 2021-05 |
| Spora | $0.2M | 146.38 | 23 | 2017-01 | 2017-11 |
| AvosLocker | $0.2M | 3.4 | 3 | 2021-09 | 2021-09 |
| WannaCry | $0.1M | 59.6 | 524 | 2017-03 | 2021-09 |
| Tejodes | $0.1M | 10.78 | 26 | 2019-05 | 2019-10 |
| NotNevada | $0.1M | 3.82 | 5 | 2022-10 | 2023-02 |
| TripleM | $0.1M | 28.64 | 30 | 2016-12 | 2019-06 |
| CryptXXX | $0.1M | 94.86 | 82 | 2016-06 | 2016-08 |
| Globev3 | $0.0M | 40.25 | 43 | 2016-09 | 2018-02 |
| LockBit 2.0 | $0.0M | 0.9 | 8 | 2021-06 | 2021-09 |
| NotPetya | $0.0M | 8.99 | 123 | 2017-06 | 2021-08 |
| Ako | $0.0M | 3.67 | 12 | 2020-01 | 2020-02 |
| Globe | $0.0M | 27.81 | 127 | 2016-06 | 2017-01 |
| Mallox | $0.0M | 0.69 | 1 | 2023-04 | 2023-04 |
| Ransomnix | $0.0M | 2.53 | 8 | 2017-11 | 2018-07 |
| Sam | $0.0M | 29 | 2 | 2016-09 | 2016-09 |
| Black Kingdom | $0.0M | 0.72 | 2 | 2020-03 | 2021-03 |
| CryptoLocker | $0.0M | 100.86 | 54 | 2013-09 | 2014-08 |
| XLockerv5.0 | $0.0M | 12 | 7 | 2017-01 | 2017-03 |
| DeadBolt | $0.0M | 0.3 | 21 | 2022-01 | 2022-04 |
| Flyper | $0.0M | 1.61 | 5 | 2016-10 | 2018-07 |
| Xorist | $0.0M | 4.2 | 12 | 2017-05 | 2017-09 |
| Ranzy Locker | $0.0M | 0.21 | 1 | 2021-02 | 2021-02 |
| File-Locker | $0.0M | 2.81 | 442 | 2012-03 | 2021-07 |
| APT | $0.0M | 12.85 | 11 | 2016-09 | 2016-12 |
| StorageCrypter | $0.0M | 0.79 | 2 | 2017-11 | 2017-11 |
| LamdaLocker | $0.0M | 6.67 | 13 | 2017-01 | 2017-07 |
| VenusLocker | $0.0M | 6.8 | 8 | 2016-07 | 2017-02 |
| ChupaCabra | $0.0M | 0.17 | 31 | 2021-05 | 2021-09 |
| AlbDecryptor | $0.0M | 0.25 | 29 | 2020-04 | 2021-06 |
| Phobos | $0.0M | 0.18 | 2 | 2021-07 | 2021-07 |
| XTPLocker | $0.0M | 7 | 4 | 2016-10 | 2016-10 |
| Black Ruby | $0.0M | 0.53 | 11 | 2018-02 | 2018-02 |
| CryptConsole | $0.0M | 3.81 | 18 | 2016-04 | 2017-09 |
| CryptoTorLocker2015 | $0.0M | 16.78 | 453 | 2014-09 | 2016-08 |
| NoobCrypt | $0.0M | 9.94 | 30 | 2015-10 | 2016-07 |
| Predator | $0.0M | 0.56 | 67 | 2018-05 | 2019-06 |
| Vega / Jamper / Buran | $0.0M | 0.05 | 7 | 2021-08 | 2021-09 |
| XLocker | $0.0M | 1 | 1 | 2017-05 | 2017-05 |
| HC6/HC7 | $0.0M | 0.32 | 6 | 2017-07 | 2017-11 |
| JigSaw | $0.0M | 3.27 | 17 | 2016-03 | 2016-12 |
| ComradeCircle | $0.0M | 2.03 | 1 | 2016-10 | 2016-10 |
| Avaddon | $0.0M | 0.02 | 1 | 2021-05 | 2021-05 |
| Encrpt3d | $0.0M | 0.11 | 3 | 2019-12 | 2021-06 |
| Ecovector | $0.0M | 2 | 1 | 2016-05 | 2016-05 |
| EDA2 | $0.0M | 1.61 | 6 | 2014-10 | 2016-03 |
| Decryptiomega | $0.0M | 0.05 | 1 | 2019-08 | 2019-08 |
| Qweuirtksd | $0.0M | 0.08 | 1 | 2018-11 | 2018-11 |
| Kelly | $0.0M | 0.05 | 1 | 2020-09 | 2020-09 |
| DMALocker | $0.0M | 1.15 | 2 | 2015-12 | 2016-01 |
| Jigsaw | $0.0M | 0.32 | 1 | 2017-03 | 2017-03 |
| TowerWeb | $0.0M | 0.71 | 3 | 2016-04 | 2016-06 |
| Cryptowall | $0.0M | 0.43 | 3 | 2016-04 | 2016-06 |
| Gula | $0.0M | 0.04 | 11 | 2018-09 | 2018-11 |
| Cryptohitman | $0.0M | 0.12 | 6 | 2016-04 | 2019-09 |
| Vevolocker | $0.0M | 0.02 | 2 | 2017-11 | 2017-11 |
| DecryptIomega | $0.0M | 0.01 | 1 | 2019-07 | 2019-07 |
| Black Mamba | $0.0M | 0.04 | 1 | 2017-06 | 2017-06 |
| Bagli | $0.0M | 0 | 2 | 2021-04 | 2021-06 |
| LockOn | $0.0M | 0.01 | 1 | 2017-08 | 2017-08 |
| BlackRouter | $0.0M | 0 | 2 | 2018-12 | 2019-05 |
| NullByte | $0.0M | 0.02 | 1 | 2016-09 | 2016-09 |
| Git | $0.0M | 0 | 3 | 2019-05 | 2020-02 |
| Bucbi | $0.0M | 0.01 | 1 | 2016-04 | 2016-04 |
| Exotic | $0.0M | 0.01 | 1 | 2016-10 | 2016-10 |
| Phoenix | $0.0M | 0 | 1 | 2016-12 | 2016-12 |
| PopCornTime | $0.0M | 0 | 5 | 2016-12 | 2016-12 |
| 7ev3n | $0.0M | 0 | 2 | 2016-04 | 2017-11 |
| CryptoHost | $0.0M | 0 | 1 | 2016-06 | 2016-06 |
| WannaRen | $0.0M | 0 | 2 | 2020-04 | 2020-04 |
| ZeroLocker | $0.0M | 0 | 0 | ||
| Filecry | $0.0M | 0 | 0 | ||
| Chimera | $0.0M | 0 | 2 | 2015-11 | 2015-11 |
| CTB-Locker | $0.0M | 0 | 2 | 2016-03 | 2016-04 |
| TeslaCrypt | $0.0M | 0 | 1 | 2015-03 | 2015-03 |
| Doxware | $0.0M | 0 | 0 | ||
| Trump Locker | $0.0M | 0 | 0 | ||
| Buddy | $0.0M | 0 | 0 | ||
| ThunderCrypt | $0.0M | 0 | 0 | ||
| Nemucod | $0.0M | 0 | 0 | ||
| FireCrypt | $0.0M | 0 | 0 | ||
| Philadelphia | $0.0M | 0 | 0 | ||
| l1me_expl0it | $0.0M | 0 | 0 | ||
| Rush/Sanction | $0.0M | 0 | 0 | ||
| Domino | $0.0M | 0 | 0 | ||
| PayDay | $0.0M | 0 | 0 | ||
| Alphabet | $0.0M | 0 | 0 | ||
| Badblock | $0.0M | 0 | 0 | ||
| CryptoSweetTooth | $0.0M | 0 | 0 | ||
| BlackFeather | $0.0M | 0 | 0 | ||
| Globev2 | $0.0M | 0 | 0 | ||
| CyberSpLiTTER | $0.0M | 0 | 0 | ||
| RansomPlus | $0.0M | 0 | 0 | ||
| REKTLocker | $0.0M | 0 | 0 | ||
| BadEncrypt | $0.0M | 0 | 0 | ||
| AngleWare | $0.0M | 0 | 0 | ||
| FakeGlobe | $0.0M | 0 | 0 | ||
| AdamLocker | $0.0M | 0 | 0 | ||
| Stupid | $0.0M | 0 | 0 | ||
| Zyka | $0.0M | 0 | 0 | ||
| Avos Locker | $0.0M | 0 | 0 | ||
| Pgpsnippet | $0.0M | 0 | 0 | ||
| WannaSmile | $0.0M | 0 | 1 | 2017-11 | 2017-11 |