Blackout
Blackout is a ransomware group that first appeared in early 2024, initially claiming attacks against healthcare entities in Canada, France, and Germany before expanding to telecommunications, mining, and manufacturing sectors, operating a double-extortion model with a data leak site.
Victims
9
First Discovered
2024-02-26
victim
Last Discovered
2024-12-10
victim
Inactive Since
1yr
more than
Avg Delay
3
days
Infostealer
0.0%
victims with domain
Countries
6
hit
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Blackout Blog | Yes | 2026-05-14T00:48:11 | nginx |
black3gnkizshuynieigw6ejgpblb53mpasftzd6pydqpmq2vn2xf6yd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 3
- Business Services 2
- Transportation/Logistics 1
- Public Sector 1
- Hospitality and Tourism 1
Top 5 Countries
-
Greece
2
-
France
2
-
Croatia
1
-
Mexico
1
-
Germany
1
Heatmap
YARA Rules (1)
Victims (9)
Neda Maritime is an independent shipping company that manages and operate...…
CDC Biodiversité is a French environmental protection company making tens...…
Antaeus Travel is a travel agency specializing in corporate and sea trave...…
We carried out an attack on mcmtelecom.com, a b2b telecommunications prov...…
Why don't medical companies pay us? As usual we got into the network ht-h...…
First post on our new blog ! We encrypted 100+ servers and workstations ...…
