# Ryuk ransomware campaign infrastructure
#
# Below is a list of Internet domains registered by the Ryuk ransomware gang to
# distribute malware and act as C2 infrastructure. This threat actor continuously
# registers new domains that are in-turn uncovered and added to this list. Security
# teams can primarily use the list to retrospectively uncover compromised hosts.
#
# Copyright (c) 2021 AlphaSOC, Inc.
#
# Permission is hereby granted, free of charge, to any person obtaining a copy of
# this list and associated documentation files (the "List"), to deal in the List
# without restriction, including without limitation the rights to use, copy, modify,
# merge, publish, distribute, sublicense, and/or sell copies of the List, and to
# permit persons to whom the List is furnished to do so, subject to the following
# conditions: The above copyright notice and this permission notice shall be
# included in all copies or substantial portions of the List.
#
# THE LIST IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
# INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
# PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
# HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
# LIST OR THE USE OR OTHER DEALINGS IN THE LIST.
#
# This list was generated at 2021-01-19 08:16:14 UTC
360footwears.com
3bysybsybs54syb44by.xyz
aaatus.com
actionshunter.com
artappartberlin.com
avrenew.com
ayechecker.com
ayiyas.com
backup1helper.com
backup1master.com
backup1nas.com
backup1service.com
backup1services.com
backuphel.com
backup-helper.com
backup-leader.com
backupmaster-service.com
backupmasterservice.com
backupmastter.com
backupnas1.com
backups1helper.com
backup-simple.com
backupslive.com
bakcup-checker.com
bakcup-monster.com
beerpong101.com
best-backup.com
best-nas.com
bestservicehelper.com
besttus.com
bigtus.com
biliyilish.com
bithunterr.com
blackhoall.com
boost-helper.com
boostsecuritys.com
boost-servicess.com
boost-yourservice.com
boostyourservice.com
bouths.com
brainschampions.com
bugsbunnyy.com
cantliee.com
caonimas.com
chainnss.com
chalengges.com
cheapshhot.com
check1domains.com
check1drivers.com
check4list.com
checkhunterr.com
checksservice.com
checktodrivers.com
checkwinupdate.com
chekingking.com
ciscocheckapi.com
citylifedns.com
cleardefencewin.com
clearhelperinthischekmachine-advisorworld.monster
client-update.xyz
cmdupdatewin.com
comssite.com
conhostservice.com
cylenceprotect.com
daggerclip.com
debug-service.com
defenswin.com
developmasters.com
domnasemg.com
dotmaingame.com
drive-boost.com
drivegit.com
driver1downloads.com
driver1master.com
driver1updater.com
driver-boost.com
driver-boosters.com
driverdwl.com
driverjumper.com
driversna.com
driversupd.com
driver-upd.com
dwndrivers.com
easytus.com
eighteenthservicehelper.com
eighthservicehelper.com
eighthserviceupdater.com
eithtservice-developer.com
elephantdrrive.com
eleventhservicehelper.com
eleventhserviceupdater.com
errvghu.com
explore-me.xyz
fashionday.monster
fashionweek.monster
fastbloodhunter.com
fifteenthservicehelper.com
fifthservice-developer.com
fifthservicehelper.com
fifthserviceupdater.com
find1drivers.com
find1service.com
finderdnsbroadserv-openworld.com
findtus.com
firstservice-developer.com
firstserviceupdater.com
firstservisehelper.com
firsttus.com
fourservicehelper.com
fourteenthservicehelper.com
fourthservice-developer.com
fourthserviceupdater.com
freeallsafe.com
freeoldsafe.com
gameleaderr.com
getinformationss.com
giveasees.com
godofservice.com
greattus.com
growtancy.com
gtrsqer.com
gungameon.com
gunsdrag.com
hakunaman.com
hakunamatatata.com
harddagger.com
hashsystem.xyz
havemosts.com
havesetup.net
helpforyourservice.com
hotlable.com
htpdomrtx.com
hunbabe.com
hungrrybaby.com
huntersservice.com
hurrypotter.com
hustlerclubnewyork.com
hustlernewyorkstripclub.com
hustlernycstripclub.com
hustlernystripclub.com
hustlerstripclub.com
hybriqdjs.com
ibackupboost.com
ibackupupdate.com
ibackupview.com
idriveboost.com
idrivecheck.com
idrivedownload.com
idrivedwn.com
idrivefinder.com
idrivehepler.com
idriverrs.com
idriveupdate.com
idriveview.com
iexploreservice.com
imagodd.com
imasterupdate.com
info-develop.com
iservicec.com
it1booster.com
itopupdater.com
iupdatemaster.com
iupdaters.com
jomamba.best
jonsonsbabyy.com
kamitorishoji.com
kungfupandasa.com
lindasak.com
livecheckpointsrs.com
livehealths.com
livetus.com
loockfinderrs.com
loxliver.com
lsassupdate.com
lsasswininfo.com
luckyhunterrs.com
martahzz.com
maybebaybe.com
microsoftupdateswin.com
mixunderax.com
moonshardd.com
mountasd.com
myobtain.com
myservicebooster.com
myservicebooster.net
myserviceconnect.net
myserviceupdater.com
myyserviceupdater.com
nasbooster.com
nas-helper.com
nashelper.com
nas-leader.com
nasmasterservice.com
nasmastrservice.com
nas-simple-helper.com
nasupdater.com
ncedrive.com
newservicehelper.com
nineteenthservicehelper.com
ninethservice-developer.com
ninethserviceupdater.com
ninthservicehelper.com
nomadfunclub.com
open1vpn.com
primeviref.com
puckhunterrr.com
pudgeee.com
qascker.com
quwasd.com
raaidboss.com
raidbossa.com
rapirasa.com
razorses.com
realgamess.com
regbed.com
reginds.com
remotessa.com
removerchangefile.monster
renovatesystem.com
rulemonster.com
run-tcp.com
run-tcp.info
run-tcp.me
run-tcp.net
run-upgrade.monster
run-upgrade.xyz
saynoforbubble.com
scrservallinst.info
secondlivve.com
secondservice-developer.com
secondservicehelper.com
secondserviceupdater.com
service1boost.com
service1update.com
service1updater.com
service1upd.com
service1view.com
service-boost.com
service-booster.com
service-boosterr.com
serviceboosterr.com
serviceboostnumberone.com
service-boostter.com
service-checker.com
servicecheckerr.com
servicedbooster.com
servicedhunter.com
servicedpower.com
servicedupdater.com
servicegungster.com
service-hel.com
servicehel.com
service-hellper.com
servicehellps.com
service-helpes.com
service-hunter.com
servicehunterr.com
service-leader.com
servicemonsterr.com
servicemount.com
servicereader.com
servicesbooster.com
servicesbooster.org
servicesecurity.org
servicesen.com
servicesgit.com
serviceshelpers.com
serviceshelps.com
servicesupdater.com
servicesups.com
serviceswork.net
service-updateer.com
service-updater.com
serviceupdates.net
serviceupdatter.com
serviceuphelper.com
servicewikii.com
seventeenthservicehelper.com
seventhservice-developer.com
seventhservicehelper.com
seventhserviceupdater.com
sexycservice.com
sexyservicee.com
shabihere.com
sibalsakie.com
simple-backupbooster.com
simpleservice-checker.com
sixteenthservicehelper.com
sixthservice-developer.com
sixthservicehelper.com
sixthserviceupdater.com
sobcase.com
sophosdefence.com
sunofgodd.com
supservupdate.com
sweetmonsterr.com
target-support.online
tarhungangster.com
taskshedulewin.com
tenthservice-developer.com
tenthservicehelper.com
tenthserviceupdater.com
thecheckupdater.com
thespunj.com
thirdservice-developer.com
thirdservicehelper.com
thirdserviceupdater.com
thirteenthservicehelper.com
tiancaii.com
timesshifts.com
top3servicebooster.com
top3-services.com
top-backuphelper.com
topbackup-helper.com
topbackupintheworld.com
top-backupservice.com
topsecurityservice.net
top-servicebooster.com
topservicebooster.com
topservicehelper.com
topservice-masters.com
topservicesbooster.com
topservicesecurity.com
topservicesecurity.net
topservicesecurity.org
topservicesupdate.com
topservicesupdates.com
top-serviceupdater.com
topserviceupdater.com
tukunavi.com
twelfthservicehelper.com
twelvethserviceupdater.com
twentiethservicehelper.com
u6ycrtduvb6d5rttvub6d5.com
uncheckhel.com
unlockwsa.com
update-chromeservices.com
updatemanagir.us
update-wind.com
updatewinlsass.com
update-wins.com
updatewinsoftr.com
upddrivers.com
updsql.me
view1drive.com
view1drivers.com
view-backup.com
viewdrivers.com
vloerplan.com
vnuret.com
voiddas.com
web-analysis.live
windefenceinfo.com
windefens.com
winsysteminfo.com
winsystemupdate.com
wodemayaa.com
wondergodst.com
worldtus.com
x3q24wxc54vd6b5f7.best
yourserviceupdater.com
yoursuperservice.com
zapored.com
zetrexx.com
zhameharden.com