Caution: Don't open Onion links unless you're prepared for what the darknet holds.

About NZ ThreatWatch

What this service is and who it is for

About NZ ThreatWatch

NZ ThreatWatch is a free, public situational-awareness dashboard that tracks ransomware and cyber threats targeting New Zealand organisations. It aggregates publicly available threat intelligence from trusted third-party security platforms — including ransomware.live and RansomLook — and presents it on an interactive map, a searchable feed, and a directory of active threat groups. The goal is to give Kiwi businesses, IT teams, and security professionals a single, clear view of who is being targeted, by which groups, and where those victims are located.

The platform is built for a broad audience: IT and security teams who need early warning of active campaigns, business owners and executives who want to understand their exposure, managed service providers protecting multiple clients, insurers and incident responders assessing risk, and anyone with an interest in the New Zealand cyber threat landscape. Alongside the live feed, NZ ThreatWatch offers practical tools — including trends and analytics, a domain checker to see whether your organisation has appeared on a leak site, a ransomware negotiation simulator for training, and a baseline checklist for securing your network.

NZ ThreatWatch is an independent project. It is not affiliated with any government agency, law enforcement body, or the third-party platforms it sources data from. The dashboard does not host, control, or endorse any content published on external leak sites or darknet portals — it only links to data published by other security platforms. Threat listings are claims made by actors and may be inaccurate; always verify any incident with your own IT team or managed service provider before taking action. For confirmed incidents, contact CERT NZ and your cyber insurance provider promptly.

What you can do here

Threat Feed

Live map and list of NZ victims with location enrichment.

Groups

Directory of active ransomware groups and their leak sites.

Trends

Analytics on targeting activity over time and by sector.

Secure Network

Baseline checklist to harden your defences.

Negotiate

Simulated ransom negotiation for training.

Domain Check

See if your domain appears on a leak site.

Buy me a coffee