ID Ransomware
ID Ransomware analyzes a ransom note or encrypted file to identify the ransomware responsible for encrypting data.
About ID Ransomware
ID Ransomware is a web service that helps identify which ransomware has encrypted a user's data. The user uploads a ransom note, a sample encrypted file, or both, and the site attempts to match them to a known ransomware family. The homepage states that the service currently detects 1188 ransomware families and provides a dynamic list of them on the site. The directory lists the service for web and Android.
The service only identifies ransomware it detects, so a result depends on whether the family appears in its current list. The homepage excerpt does not describe how uploaded files are stored, shared, or deleted, so users who are concerned about the privacy of their files should review the site's own policies before uploading. Pricing is unknown.
Key features
- Identifies ransomware from an uploaded ransom note
- Identifies ransomware from an uploaded sample encrypted file
- Accepts a ransom note and a sample encrypted file together
- Publishes a dynamic list of currently detected ransomware families
- States that it currently detects 1188 ransomware families
- States that it currently detects 1188 ransomware families
- Accepts either a ransom note, an encrypted file, or both
- Requires uploading a ransom note and/or encrypted file to the site
- Detection is limited to the ransomware families it currently lists
ID Ransomware at a glance
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Android, Web
- Open source
- Not stated
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Popular in Antivirus & Malware Protection
Well-known listings from the same topic.
ID Ransomware FAQ
Which ransomware does ID Ransomware detect?
What files can I upload?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.