# Ryuk ransomware campaign infrastructure # # Below is a list of Internet domains registered by the Ryuk ransomware gang to # distribute malware and act as C2 infrastructure. This threat actor continuously # registers new domains that are in-turn uncovered and added to this list. Security # teams can primarily use the list to retrospectively uncover compromised hosts. # # Copyright (c) 2021 AlphaSOC, Inc. # # Permission is hereby granted, free of charge, to any person obtaining a copy of # this list and associated documentation files (the "List"), to deal in the List # without restriction, including without limitation the rights to use, copy, modify, # merge, publish, distribute, sublicense, and/or sell copies of the List, and to # permit persons to whom the List is furnished to do so, subject to the following # conditions: The above copyright notice and this permission notice shall be # included in all copies or substantial portions of the List. # # THE LIST IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, # INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A # PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT # HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION # OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE # LIST OR THE USE OR OTHER DEALINGS IN THE LIST. # # This list was generated at 2021-01-19 08:16:14 UTC 360footwears.com 3bysybsybs54syb44by.xyz aaatus.com actionshunter.com artappartberlin.com avrenew.com ayechecker.com ayiyas.com backup1helper.com backup1master.com backup1nas.com backup1service.com backup1services.com backuphel.com backup-helper.com backup-leader.com backupmaster-service.com backupmasterservice.com backupmastter.com backupnas1.com backups1helper.com backup-simple.com backupslive.com bakcup-checker.com bakcup-monster.com beerpong101.com best-backup.com best-nas.com bestservicehelper.com besttus.com bigtus.com biliyilish.com bithunterr.com blackhoall.com boost-helper.com boostsecuritys.com boost-servicess.com boost-yourservice.com boostyourservice.com bouths.com brainschampions.com bugsbunnyy.com cantliee.com caonimas.com chainnss.com chalengges.com cheapshhot.com check1domains.com check1drivers.com check4list.com checkhunterr.com checksservice.com checktodrivers.com checkwinupdate.com chekingking.com ciscocheckapi.com citylifedns.com cleardefencewin.com clearhelperinthischekmachine-advisorworld.monster client-update.xyz cmdupdatewin.com comssite.com conhostservice.com cylenceprotect.com daggerclip.com debug-service.com defenswin.com developmasters.com domnasemg.com dotmaingame.com drive-boost.com drivegit.com driver1downloads.com driver1master.com driver1updater.com driver-boost.com driver-boosters.com driverdwl.com driverjumper.com driversna.com driversupd.com driver-upd.com dwndrivers.com easytus.com eighteenthservicehelper.com eighthservicehelper.com eighthserviceupdater.com eithtservice-developer.com elephantdrrive.com eleventhservicehelper.com eleventhserviceupdater.com errvghu.com explore-me.xyz fashionday.monster fashionweek.monster fastbloodhunter.com fifteenthservicehelper.com fifthservice-developer.com fifthservicehelper.com fifthserviceupdater.com find1drivers.com find1service.com finderdnsbroadserv-openworld.com findtus.com firstservice-developer.com firstserviceupdater.com firstservisehelper.com firsttus.com fourservicehelper.com fourteenthservicehelper.com fourthservice-developer.com fourthserviceupdater.com freeallsafe.com freeoldsafe.com gameleaderr.com getinformationss.com giveasees.com godofservice.com greattus.com growtancy.com gtrsqer.com gungameon.com gunsdrag.com hakunaman.com hakunamatatata.com harddagger.com hashsystem.xyz havemosts.com havesetup.net helpforyourservice.com hotlable.com htpdomrtx.com hunbabe.com hungrrybaby.com huntersservice.com hurrypotter.com hustlerclubnewyork.com hustlernewyorkstripclub.com hustlernycstripclub.com hustlernystripclub.com hustlerstripclub.com hybriqdjs.com ibackupboost.com ibackupupdate.com ibackupview.com idriveboost.com idrivecheck.com idrivedownload.com idrivedwn.com idrivefinder.com idrivehepler.com idriverrs.com idriveupdate.com idriveview.com iexploreservice.com imagodd.com imasterupdate.com info-develop.com iservicec.com it1booster.com itopupdater.com iupdatemaster.com iupdaters.com jomamba.best jonsonsbabyy.com kamitorishoji.com kungfupandasa.com lindasak.com livecheckpointsrs.com livehealths.com livetus.com loockfinderrs.com loxliver.com lsassupdate.com lsasswininfo.com luckyhunterrs.com martahzz.com maybebaybe.com microsoftupdateswin.com mixunderax.com moonshardd.com mountasd.com myobtain.com myservicebooster.com myservicebooster.net myserviceconnect.net myserviceupdater.com myyserviceupdater.com nasbooster.com nas-helper.com nashelper.com nas-leader.com nasmasterservice.com nasmastrservice.com nas-simple-helper.com nasupdater.com ncedrive.com newservicehelper.com nineteenthservicehelper.com ninethservice-developer.com ninethserviceupdater.com ninthservicehelper.com nomadfunclub.com open1vpn.com primeviref.com puckhunterrr.com pudgeee.com qascker.com quwasd.com raaidboss.com raidbossa.com rapirasa.com razorses.com realgamess.com regbed.com reginds.com remotessa.com removerchangefile.monster renovatesystem.com rulemonster.com run-tcp.com run-tcp.info run-tcp.me run-tcp.net run-upgrade.monster run-upgrade.xyz saynoforbubble.com scrservallinst.info secondlivve.com secondservice-developer.com secondservicehelper.com secondserviceupdater.com service1boost.com service1update.com service1updater.com service1upd.com service1view.com service-boost.com service-booster.com service-boosterr.com serviceboosterr.com serviceboostnumberone.com service-boostter.com service-checker.com servicecheckerr.com servicedbooster.com servicedhunter.com servicedpower.com servicedupdater.com servicegungster.com service-hel.com servicehel.com service-hellper.com servicehellps.com service-helpes.com service-hunter.com servicehunterr.com service-leader.com servicemonsterr.com servicemount.com servicereader.com servicesbooster.com servicesbooster.org servicesecurity.org servicesen.com servicesgit.com serviceshelpers.com serviceshelps.com servicesupdater.com servicesups.com serviceswork.net service-updateer.com service-updater.com serviceupdates.net serviceupdatter.com serviceuphelper.com servicewikii.com seventeenthservicehelper.com seventhservice-developer.com seventhservicehelper.com seventhserviceupdater.com sexycservice.com sexyservicee.com shabihere.com sibalsakie.com simple-backupbooster.com simpleservice-checker.com sixteenthservicehelper.com sixthservice-developer.com sixthservicehelper.com sixthserviceupdater.com sobcase.com sophosdefence.com sunofgodd.com supservupdate.com sweetmonsterr.com target-support.online tarhungangster.com taskshedulewin.com tenthservice-developer.com tenthservicehelper.com tenthserviceupdater.com thecheckupdater.com thespunj.com thirdservice-developer.com thirdservicehelper.com thirdserviceupdater.com thirteenthservicehelper.com tiancaii.com timesshifts.com top3servicebooster.com top3-services.com top-backuphelper.com topbackup-helper.com topbackupintheworld.com top-backupservice.com topsecurityservice.net top-servicebooster.com topservicebooster.com topservicehelper.com topservice-masters.com topservicesbooster.com topservicesecurity.com topservicesecurity.net topservicesecurity.org topservicesupdate.com topservicesupdates.com top-serviceupdater.com topserviceupdater.com tukunavi.com twelfthservicehelper.com twelvethserviceupdater.com twentiethservicehelper.com u6ycrtduvb6d5rttvub6d5.com uncheckhel.com unlockwsa.com update-chromeservices.com updatemanagir.us update-wind.com updatewinlsass.com update-wins.com updatewinsoftr.com upddrivers.com updsql.me view1drive.com view1drivers.com view-backup.com viewdrivers.com vloerplan.com vnuret.com voiddas.com web-analysis.live windefenceinfo.com windefens.com winsysteminfo.com winsystemupdate.com wodemayaa.com wondergodst.com worldtus.com x3q24wxc54vd6b5f7.best yourserviceupdater.com yoursuperservice.com zapored.com zetrexx.com zhameharden.com