Threat actor · G1043

BlackByte

Hecamede

UnattributedNo public state or group attribution on record

BlackByte is a ransomware threat actor operating since at least 2021. BlackByte is associated with several versions of ransomware also labeled BlackByte Ransomware. BlackByte ransomware operations initially used a common encryption key allowing for the development of a universal decryptor, but subsequent versions such as BlackByte 2.0 Ransomware use more robust encryption mechanisms.

MITRE ATT&CK Techniques

Associated Malware

AdFindArpBlackByte 2.0 RansomwareBlackByte RansomwareCobalt StrikeExbyteMimikatzPsExec

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.