Skip to main content
Lineages · investigation canvasAlpha

How operators connect
to their victims.

An interactive map of every ransomware operator we track. Start with the network of operators wired by alias and shared onion infrastructure. Click any node to expand its victims onto the canvas. Then use Find path to answer the analyst question: how is operator X connected to victim Y? — Heads up: this is an early alpha. The interactions take a moment to learn; expect rough edges while we iterate.

Operators in graph
0
Victims loaded
0
Inferences
0
rebrand / affiliate
Largest cluster
0
connected nodes
|
Building the graph…
Now
drag to rewind
Jul 2024Jul 2025Jun 2026