CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd

• Ability to search Ransomware attacks by date.
• Ability to search Ransomware attacks by attack groups.
• Ability to list attack groups.
• Ability to search the Ransomware attacks description (RegEx).

jq is required to run this application.

sudo apt update
sudo apt install jq

sudo yum install jq

sudo yum install epel-release
sudo yum update
sudo yum install jq

Simply clone the repository to the location you want: (Example: you want to place it in ~/apps/

mkdir -p ~/apps/
cd ~/apps/
git clone https://github.com/AyoobAli/ransomwatch-cli
cd ransomwatch-cli
chmod +x ransomwatch-cli
./ransomwatch-cli

To run the application from any directory, just create a symlink of ransomwatch-cli in your bin directory.

ln -s ~/apps/ransomwatch-cli/ransomwatch-cli ~/bin/ransomwatch-cli

OR One line installation:

mkdir -p ~/bin/ && mkdir -p ~/apps/ && cd ~/apps/ && git clone https://github.com/ayoobali/ransomwatch-cli && cd ransomwatch-cli && chmod +x ransomwatch-cli && ln -s ~/apps/ransomwatch-cli/ransomwatch-cli ~/bin/ransomwatch-cli

Update latest records and display the records of last 5 days:

ransomwatch-cli

If you want to search for multiple records, it's recommended to update the records on the first request, then use the cached data on the rest of requests.

Display the records of last 5 days from cached data:

ransomwatch-cli -c

Display the records of last 10 days from cached data:

ransomwatch-cli -c -n 10

Display all records

ransomwatch-cli -c -a

Search for string in the records (Accepts RegEx):

ransomwatch-cli -c -a -s '\.gov' 

Display all information about all attack groups:

ransomwatch-cli -c -g ''

Search attack groups by name:

ransomwatch-cli -c -g 'lockbit3'

For more options:

ransomwatch-cli -h

[2022-11-25] v0.1.0 (Beta)

• [Added] Initial Release