bc1q4alwwtpyamt5e2a305hnef6yrm76nnluwn68rq

There are many types of ransomware, and they can vary in complexity, functionality, and the ways they encrypt files and demand ransoms. Below is a list of some of the most well-known ransomware families:

List of Ransomware Malware:

1. WannaCry

   • One of the most notorious ransomware attacks, it exploited a vulnerability in Windows SMB (Server Message Block) protocol. It encrypted files and demanded payment in Bitcoin.

2. Petya/NotPetya

   • Petya encrypts the entire hard drive’s master file table (MFT), making the system unbootable. NotPetya, a variant, was more of a destructive malware than a ransomware.

3. Locky

   • Delivered via phishing emails with malicious attachments, Locky encrypts files and demands a ransom payment to release the decryption key.

4. Cerber

   • A ransomware-as-a-service (RaaS) strain that encrypts files and can even play an audio message announcing the attack. It often demands payment in Bitcoin.

5. CryptoLocker

   • One of the earliest forms of ransomware, it encrypts files using RSA encryption and demands payment within a time frame to release the decryption key.

6. Ryuk

   • A highly targeted ransomware used in attacks against large organizations. It is known for being deployed in conjunction with other malware like TrickBot and Emotet.

7. Sodinokibi (REvil)

   • A RaaS model ransomware that has targeted both small and large businesses, encrypting files and demanding large sums of ransom. It also threatens to leak sensitive data if payment is not made.

8. Maze

   • Known for its “double extortion” tactic, Maze encrypts files and also threatens to release the stolen data publicly if the ransom is not paid.

9. GandCrab

   • This ransomware was active from 2018 to mid-2019 and followed a RaaS model, offering affiliates a share of the profits. GandCrab developers claimed to have retired after making massive profits.

10. Dharma/Crysis

    • A ransomware variant that encrypts files and appends different extensions to encrypted files. It is often distributed via RDP (Remote Desktop Protocol) exploits.

11. Bad Rabbit

    • Spread through fake Adobe Flash updates, Bad Rabbit encrypts files and demands payment in Bitcoin.

12. SamSam

    • Targeted ransomware that is usually deployed after attackers gain access to a network. Known for attacking government and healthcare institutions.

13. Jigsaw

    • Named after the villain from the “Saw” movies, this ransomware deletes files every hour until the ransom is paid.

14. TeslaCrypt

    • Initially targeted video game files for encryption but later expanded to encrypt a variety of file types. Developers eventually released the master decryption key.

15. Egregor

    • A relatively new ransomware strain that uses similar tactics to Maze, threatening to release stolen data if the ransom is not paid.

16. BitPaymer

    • Known for targeting healthcare and critical infrastructure, BitPaymer encrypts files and demands a large ransom in Bitcoin.

17. MedusaLocker

    • This ransomware spreads through spam emails and encrypts files while leaving a ransom note demanding payment in cryptocurrency.

18. Snake (Ekans)

    • Targeting industrial control systems (ICS), Snake ransomware is designed to encrypt files related to ICS operations, primarily in industrial environments.

19. Conti

    • A RaaS model ransomware that encrypts data and steals it, threatening to publish the data if the ransom isn’t paid. Conti was responsible for high-profile attacks on healthcare and government sectors.

20. Clop

    • Known for disabling Windows Defender to evade detection, Clop encrypts files and demands ransom in exchange for decryption.

21. RobinHood

    • Typically used in attacks against municipal governments, RobinHood ransomware encrypts files and demands ransom in Bitcoin.

22. Phobos

    • A variant of Dharma, Phobos is spread through unsecured RDP and targets businesses, encrypting their files and demanding ransom payments.

23. DarkSide

    • A RaaS ransomware that gained attention for its attack on Colonial Pipeline, disrupting fuel supplies in the U.S.

24. Avaddon

    • Another RaaS model ransomware, Avaddon encrypts files and demands ransom while threatening to leak stolen data if the ransom isn’t paid.

25. Mount Locker

    • Mount Locker encrypts files and demands ransom while also threatening to leak sensitive data if the ransom is not paid. It has targeted several large organizations.

26. PonyFinal

    • A Java-based ransomware used in targeted attacks on healthcare and other high-value industries. It is deployed manually after attackers gain access to the network.

27. Nemty

    • This ransomware spreads through RDP and phishing campaigns, encrypting files and demanding Bitcoin as a ransom.

28. Ranzy Locker

    • A ransomware variant that steals data before encryption, threatening to release the data publicly if the ransom is not paid.

29. Makop

    • This ransomware variant targets small and medium-sized businesses by encrypting files and demanding ransom in cryptocurrency.

30. VegaLocker

    • A ransomware strain that operates through malvertising and fake updates, encrypting files and demanding ransom to release them.