BlacklistChain
Home › Ransomware wallets › REvil / Sodinokibi

REvil / Sodinokibi ransomware Bitcoin addresses

REvil / Sodinokibi is a ransomware family whose ransom addresses were reported by victims and researchers.

8wallets on the register
18transactions recorded
Jan 2020 – Jun 2021first to latest transaction
0wallets still holding BTC

If a ransom note asked you to pay one of these addresses, report the attack to the police before paying anyone. Paying a sanctioned group can be illegal. Check any address.

All

AddressTransactionsFirst seenLast seen
3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK6Jan 2020Jan 2020
34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj2Jun 2021Jun 2021
3E9F7gE3upQ8rgsPjwiKH7ugfdneypPjqj2Jan 2020Jan 2020
3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV2Jun 2021Jun 2021
3JYLAk26kZPw62W6UD2Jyk5i9jhCAPJjg42Apr 2021Apr 2021
3Jxwt3fmXhUwDNDQ4sWYCgahLGDVjy1SQm2May 2021May 2021
3L7ECcRBCypxrS5U9Kw9WexcsHmX4wKYz62Jun 2021Jun 2021
bc1q5jqgm7njwpekaad7q2qttzhkxzjph5un2r7yl7–

All ransomware families · What the ransomware data shows