---
title: "Ransomware press"
method: GET
path: "/ransomware/press"
tags: ["ransomware"]
---

# Ransomware press

`GET /ransomware/press`

Recent cyberattack press coverage from the cached ransomware.live
`/press/all` dataset, newest first, entries dated more than a day ahead
dropped: `{"entries": [{title, date, source,
country, url, ransomwareGroup, infostealerRelated, description}],
"total"}` where `total` counts the returned entries. Costs one request of
the monthly quota.

## Query parameters

- `limit` integer
- `groups` string

## Response `200`

`{"entries": [{title, date, source, country, url, ransomwareGroup, infostealerRelated, description}], "total"}`

- object

## Other responses

- `401` — Unauthorized - Missing or invalid API key
- `429` — Too many requests - Rate limit exceeded

## Changes

- **2026-09-23** `edb544398108` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/ransomware/press/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) · [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/fe46a64acc79?raw)