Blacksuit
According to Trend Micro, this ransomware has significant code overlap with Royal Ransomware.
Victims
184
First Discovered
2023-06-12
victim
Last Discovered
2025-06-02
victim
Inactive Since
306
days
Avg Delay
38.7
days
Infostealer
8.2%
victims with domain
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
This Site Has Been Seized | Yes | 2026-04-04 03:01:34 | nginx | weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion |
Target (Available)
Top 5 Activity Sectors
- Business Services 43
- Healthcare 22
- Manufacturing 19
- Government 18
- Technology 13
Top 5 Countries
-
United States
100
-
United Kingdom
9
-
Canada
6
-
Spain
4
-
India
3
Heatmap (Available)
Ransom Notes (1)
Tools Used (Available)
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
AdFind
Advanced IP Scanner
SharpHound
SharpShares
SoftPerfect NetScan
|
AnyDesk
Atera
LogMeIn
MobaXterm
|
Eraser
GMER
Inno Setup
PowerTool
|
AccountRestore
Mimikatz
NirSoft Dialupass
NirSoft IEPassView (iepv)
NirSoft MailPassView
NirSoft Netpass
NirSoft RouterPassView
|
Brute Ratel C4
Cobalt Strike
Rubeus
|
Chisel
Cloudflared
OpenSSH
|
attrib
PsExec
|
Bublup
RClone
Temp[.]sh
|
Vulnerabilities Exploited (0)
No vulnerabilities exploited available.
TTPs Matrix (6)
| Resource Development | Initial Access | Privilege Escalation | Defense Evasion | Command and Control | Impact |
|---|---|---|---|---|---|
| Acquire Access | Remote Services: Remote Desktop Protocol | Valid Accounts | Remote Services: Remote Desktop Protocol | Ingress Tool Transfer | Data Encrypted for Impact |
| External Remote Services | Valid Accounts: Domain Accounts | Indicator Removal: Clear Windows Event Logs | Protocol Tunneling | Inhibit System Recovery | |
| Exploit Public-Facing Application | Automated Collection | ||||
| Phishing | Domain Policy Modification: Group Policy Modification | ||||
| Phishing: Spear phishing Attachment | Impair Defenses: Disable or Modify Tools | ||||
| Phishing: Spear phishing Link |
Negotiation Chats (0)
No negotiation chats available.
YARA Rules (1)
Indicators of Compromise (IoCs) (1)
IP
1
| Type | IOC |
|---|---|
ip
|
104.244.75.168
|
Victims (184)
Founded in 1968, the Kansas City Aviation Center offers a range of aviation services. The center hel…
The Committee is comprised of residents of Gloucester County who are appointed by the Gloucester Cou…
[AI generated] Pacific Metallurgical is a manufacturing company in Kent, Washington which offers hea…
[AI generated] The Fortune Society is a non-profit organization based in New York, dedicated to supp…
In the early 1970s, MMWEC worked to gather and focus the collective strength of municipal utilities …
[AI generated] The Town of Orangeville is the municipal government serving the town of Orangeville, …
[AI generated] Certainly! "Midwest.com" is a company focused on providing comprehensive solutions an…
[AI generated] I'm sorry, but I don't have specific information about the company "copresi.es" in my…
The Grandview School District, with families and the community, will put students first by providing…
[AI generated] The website "co.cullman.al.us" represents Cullman County in Alabama. It serves as an …
[AI generated] Eastgate Auto is an automotive dealership specializing in the sale of new and used ve…
KCI Aviation's headquarters is in Taylor County at 1211 AFG Road, Bridgeport, WV with a hangar in Bu…
Het Rhedens heeft drie locaties die samen alle vormen van voortgezet onderwijs aanbieden: van prakti…
[AI generated] Brandywine Coach Works is an auto body repair company that specializes in collision r…
[AI generated] I'm sorry, but I don't have specific information about "kapurinc.com." It's possible …
[AI generated] Surgical Associates is a medical practice specializing in surgical care, offering a r…
[AI generated] Billyheromans.com is the online presence of Billy Heroman’s Flowers & Gifts, a family…
[AI generated] Marysville.k12.oh.us is the domain for the Marysville Exempted Village School Distric…
Stalyhill Infants is a very special school and we hope that you soon feel a valued part of our famil…
[AI generated] Stepping Stones is a non-profit organization focused on providing educational and the…
[AI generated] Jarrell Industrial Management Corp. (jarrellimc.com) specializes in industrial manage…
Supply Technologies, a subsidiary of ParkOhio(NASDAQ:PKOH), specializes in supplier selection and ma…
Founded in Taiwan, Maxxis got its start by making bicycle tires, and soon expanded its offerings to …
DezineCorp has been a trusted supplier of decorated promotional products in Canada since 2009, enabl…
SVP Worldwide, founded in 2004 and headquartered in Lavergne, Tennessee, designs, manufactures, and …
[IA generated] Nath Companies is a diversified business group engaged in hospitality, real estate, a…
I'm sorry, but I couldn't find specific information about a company named "wescan-services.com 760 G…
Wescan Services is a company specializing in providing comprehensive solutions for environmental and…
At LolaLiza, we believe that outer appearance reflects the inner soul, which is why it is our aim to…
Deschamps Imp is a company specializing in innovative solutions for ground stabilization and access.…
I'm sorry, but I don't have specific information about "omara-ag.com" in my training data up to Octo…
Zyloware is a prominent eyewear company known for its innovative designs and high-quality products. …
United Sprinkler is a company specializing in the design, installation, and maintenance of fire prot…
Aerotecnic is a company specializing in the design, manufacturing, and assembly of aerospace compone…
RCSchools.net represents Rutherford County Schools, a public school district in Tennessee. The distr…
As of my last update, there is no specific information available about "mopsohio.com." It's possible…
Kansas City Hospice is a nonprofit organization providing compassionate end-of-life care and support…
Neighbors Credit Union is a not-for-profit, full service financial institution where every member ha…
The Volta River Authority generates, transmits and distributes electricity under the Volta River Dev…
"Genpro, Inc. is an integrated 3PL with over 30 years of experience and a deep bench of proven profe…
Branhaven Chrysler Dodge Jeep RAM has been serving drivers in New Haven, Hartford, Middletown…
Decalesp.com is a company specializing in high-quality decals and stickers for various applications.…
Lolaliza.com is a fashion retailer specializing in trendy clothing and accessories for women. The br…
Despite repeated attempts to contact menningerclinic.org we were ignored. The negligence of the mana…
Cottles Inc. is a dynamic company specializing in innovative packaging solutions. They offer a wide …
The F.D. Lawrence Electric Company is committed to reducing the energy usage and power consumption o…
Hostetler Buildings has grown a lot since we started in 1966. And we continue to grow. But there’s s…
Charles Darwin School is the only secondary school in the Biggin Hill area of the London Borough of …
http://ng2gzceugc2df6hp6s7wtg7hpupw37vqkvamaydhagv2qbrswdqlq6ad.onion/dwango/…
OSDA's capability for rapid prototyping and new product introduction is one of our core competencies…
MorningStar Senior Living is a company dedicated to providing quality senior living options, includi…
Hollywood Burbank Airport (BUR) is owned and operated by the Burbank-Glendale-Pasadena Airport Autho…
The owner-managed family business Clatronic International GmbH has been in existence since 1982 as a…
Malone Toyota is a car dealership specializing in the sale of new and pre-owned Toyota vehicles. The…
Bettis Asphalt & Construction, Inc. was formed in 1979 as a family-owned hot mix asphalt paving and …
Community High School District 117, being a community of learners with a vision of excellence, is co…
Despite warnings, Rhinocorps management did not see fit to take care of its partners and employees. …
Reward Hospitality is Asia Pacific's largest supplier to the hospitality and care industries. With 2…
You have 4 days to contact us; otherwise the data will be released.…
Unfortunately, the management of cedarfalls.com shows no commitment to ensuring the data security of…
You have 4 days to contact us; otherwise the data will be released.…
The National Health Laboratory Service (NHLS) is a large diagnostic pathology service in South Afric…
Our team gained access to the Kadokawa network almost a month ago. It took some time, because of the…
Edgewood Schools is a company that operates in the Education industry. It employs 51-100 people and …
AXIA Ventures Group Ltd (“AXIA”) is a leading regional privately-owned investment banking group prov…
Cat-i Glass Manufacturing has become a dominant supplier of precision machined glass products throug…
We at KEE Process have the international capability to provide effective wastewater treatment soluti…
The Eye Clinic Surgicenter provides treatments for clear lens exchange, corneal cross-linking, conta…
Sanglier are world leading specialists in filler commercial packaging and distribution for adhesives…
Arango Billboard & Construction Co LLC is a company that operates in the Construction industry. It e…
Kansas police said they will not pay a ransom after voluntarily agreeing to have their case files ma…
Eurotroll B.V is a Netherlands based specialist in custom-made quality control solutions for in vitr…
Established in 2001, Ipsotek LTD is a pioneer in the field of A.I.V.A. (Artificial Intelligence Vide…
Sichuan Dawei Technology Co., Ltd (Sichuan Dowell Science and Technology Company Inc.) was establish…
Vision Mechanical is providing you with all you need in mechanical aspects including plumbing, pipin…
Jackson County is one of 114 counties in Missouri. It includes most of Kansas City, Missouri, and 17…
The Montgomery County Board of Developmental Disabilities Services (MCBDDS) is the local government …
Since 1997, Mewborn & DeSelms, Attorneys at Law, has provided a broad range of legal services to bus…
Young Consulting is the market leader in providing software solutions to the employer stop loss mark…
Rafael Viñoly Architects, founded in 1983 and based in New York City — with offices in London, Manch…
TRC Talent Solutions is a full-service talent solutions provider with over 40 years of industry expe…
Herron Todd White is one of the largest independent property valuation firms in Australia.…
Since 1900, the Peter Condakes Company has been one of the best recognized names in the produce indu…
Precision Pulley and Idler Company, headquartered in Pella, Iowa, provides idlers, pulleys, take-up …
UPC Technology Corporation (UPC) is a leading, representative chemical company under the MiTAC-Synne…
Founded in 1986, Biggs Cardosa Associates is a California structural engineering firm that provides …
The Post and Courier is the main daily newspaper in Charleston, South Carolina. It traces its ancest…
Founded in 1972 and headquartered in Topeka, Kansas, McPHERSON CONTRACTORS.…
Precision Pulley and Idler Company, headquartered in Pella, Iowa, provides idlers, pulleys, take-up …
Headquartered near Manchester, UK, JM Heaford Ltd was founded in 1983 as a manufacturer of gravure p…
Eagle Hydraulic Components Inc. is a Canadian based manufacturer of engineered and standard Hydrauli…
MULTI-FILL is recognized worldwide as a leading provider of high-quality food filling systems for ha…
Olea Kiosks, Inc. is a self-service kiosk solution provider for the attractions and entertainment, h…
Worldwide manufacturer and supplier of high quality plastic fasteners, metal hardware, hook & loop a…
Precision Pulley and Idler Company, headquartered in Pella, Iowa, provides idlers, pulleys, take-up …
Phillip Townsend Associates is the leader in global benchmarking solutions, headquartered in Houston…
Precision Pulley and Idler Company, headquartered in Pella, Iowa, provides idlers, pulleys, take-up …
Gaia Herbs manufacture certified organic grower and nationally-branded herbal extracts based medicin…
PVE, LLC was founded in 2008 from one of the strongest small engineering firms in Western Pennsylvan…
South St Paul Public Schools is a company that operates in the Education industry. It employs 251-50…
The JUDGE ROTENBERG CENTER (JRC) is a special needs day and residential school located in Canto…
H + G EDV Vertriebs is a company that operates in the Information Technology and Services industry. …
Patient and member data (MRN numbers, SSN numbers, patient ID, DOB, telephone, EMAIL, residential ad…
Originally formed in 2003, PowerRail is a United States-based company, with several locations in var…
For over three decades Gilmore Construction has completed millions of square feet of wood framing he…
J.A. Piper Roofing has been providing professional, commercial roofing services and sheet metal work…
Antunovich Associates is an Architectural, Planning and Interior Design Firm with offices located in…
Commercial & Residential Construction · Montana, United States…
Southwest Binding & Laminating is a supplier of document binding and laminating equipment to public …
Nestled in the heart of the Palmetto State, the Kershaw County School District is home to almost 10,…
Blaine County Schools is a company that operates in the Education industry. It employs 251-500 peopl…
Henry County Schools operates high schools, middle schools, and elementary schools throughout the st…
Centroedile is the most popular distributor of construction and renovation materials in Lombardy…
DePauw University in Greencastle, Indiana, USA, is a private, national liberal arts college and Scho…
New River Community and Technical College serves nine counties in southeast and south central West V…
New River Community and Technical College serves nine counties in southeast and south central West V…
The City of Huber Heights and United Water are committed to providing reliable and efficient water a…
Hawkeye Area Community Action Program, Inc. (HACAP) began service for Linn County in 1965, following…
Presidncia da Repblica is a company that operates in the Government industry. It employs 2,001-5,000…
ounded in 1997, Multidev Technologies Inc. develops and provides ERP Software Solutions for the Cros…
The mandate of the Financial Services Commission (FSC) is to supervise and regulate the securities, …
IT luggage was established in London in 1985 as Landor Ltd., designing quality luggage suitable for …
Voted Tampa’s Best Family Attraction and 11-time winner of TripAdvisor Travelers’ Choice Award, ZooT…
Founded in 1979, Marjam Supply started with the purchase of a warehouse in Greenpoint, Brooklyn and …