The Best Ransomware.live Alternatives in 2026

rifteyy publishes malware and ransomware analysis reports, reverse engineering breakdowns, and security research.

This OSINT Toolkit page groups Google and Bing search operators for web research, including queries for sites, links and trends.

Search Vulmon for vulnerabilities and exploits by product or vulnerability type, with recent CVEs and research posts.

View the live cyber threat map published by Check Point for current threat activity.

Filesec.io tracks file extensions used by attackers and publishes updates for people following malware research.

Explore threat research, advisories, and security information published by FortiGuard Labs.

gofoss.net guides users through replacing Google, Meta, and Microsoft services with free and open source alternatives.

View Bitdefender’s map showing reported cyber threats and related activity.

Read Malwarebytes’ detection notes for PC Protect, a Windows system optimizer flagged as a potentially unwanted program.

Cisco Talos provides threat intelligence and directs reputation or categorization inquiries to its support site.

Sector035 archives weekly OSINT news articles, with a collection of published issues and updates to the migrated archive.

Shodan indexes internet-connected devices and services, with search tools for examining exposed infrastructure.

LocalBitcoins has closed its Bitcoin trading service, according to the site notice.

Criminal IP provides IP reputation analysis, attack-surface monitoring, fraud detection and threat intelligence.

Read Malwarebytes’ description of the PUP.IOBit detection, including its identification of potentially unwanted IObit software for macOS.

The MIT AI Risk Initiative produces authoritative data and frameworks to help you identify, prioritize, and manage the risks from AI.

This page warns users about counterfeit ReVanced sites and helps them identify official sources to avoid scams.

Read a report about GShade adding a computer reboot action after detecting a third-party updater, which its developer called anti-tamper behavior.

Security in a Box guides users through assessing risks and protecting devices, accounts, and communications.

Speech Jammer uses audio masking to make speech harder to understand in a surrounding environment.

CertKit searches public certificate-transparency logs for certificates, subdomains and domain changes.

Explore a worldwide visualization of DDoS attacks through the Digital Attack Map.

LocalMonero and AgoraDesk have closed their peer-to-peer cryptocurrency trading platform.

Read an analysis reporting that Nekogram’s Android client contains a backdoor that collects phone numbers.