Reference library
Ransomware family profiles
A technical reference library. Do not identify a ransomware family from an extension or ransom note alone.
Statuses below describe confidence in a family profile, not confirmation of an infection or activity in the last 30 days.
Confirmed · ConfirmedProbable · ProbableUnconfirmed · UnconfirmedUnknown · Unknown
How confidence levels are determined