Ransomware Group

BlackByte

Ransomware. Uses dropper written in JavaScript to deploy a .NET payload.

Known victims147

Threat level

HIGH

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Tactics, Techniques & Procedures (TTPs)

The following Tor hidden services have been associated with this group:

These sites are malicious. Open them only from an isolated environment.

Look up your domain to see whether it appears on BlackByte’s victim list.

Try it nowFree⌘K

Try

risk score · threat categories · sources · age · confidence — in one request