All Threat Groups
ID: blacksuit
Blacksuit Syndicate Dossier
First Intercepted
2023-05-23
Latest Disclosure
2025-06-02
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Emerging in May 2023, BlackSuit is an aggressive double-extortion ransomware operation operated by the former Conti and Royal syndicate core (tracked by Unit 42 as Ignoble Scorpius). Written in C++ targeting both Windows and Linux/VMware ESXi architectures (sharing over 98% binary code similarity with Royal), the group conducts high-impact intrusions demanding tens of millions of dollars across critical infrastructure, manufacturing, education, and healthcare sectors. Initial access is established through callback phishing (vishing), compromised third-party credentials, and the exploitation of edge network devices and VPN vulnerabilities.
Tactics, Techniques & Procedures (MITRE ATT&CK)
T1190: Exploit Public-Facing Application T1078: Valid Accounts T1566.001: Spearphishing Attachment T1059.001: PowerShell T1059.003: Windows Command Shell T1021.001: Remote Desktop Protocol T1021.002: SMB/Windows Admin Shares T1003.001: LSASS Memory T1486: Data Encrypted for Impact T1490: Inhibit System Recovery T1562.001: Disable or Modify Tools T1567.002: Exfiltration to Cloud Storage
Known Dark Web Infrastructure & Mirrors
weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion
OFFLINE
Disclosed Victims & Incident Archive (359)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2025-06-02 | http://www.kcac.com | General | -- |
| 2025-05-29 | http://www.innsofaurora.com | General | -- |
| 2025-05-29 | http://metromont.com | General | -- |
| 2025-05-29 | Inns of Aurora | General | -- |
| 2025-05-15 | http://www.gloucesterva.gov | General | -- |
| 2025-05-15 | Gloucester County Virginia | General | -- |
| 2025-04-24 | https://www.pacmet.com | General | -- |
| 2025-04-24 | Pacific Metallurgical | General | -- |
| 2025-04-24 | The Fortune Society | General | -- |
| 2025-04-24 | https://fortunesociety.org/ | General | -- |
| 2025-04-15 | Kansas City Aviation Center | General | -- |
| 2025-04-05 | https://www.mmwec.org | General | -- |
| 2025-03-30 | metromont.com | General | -- |
| 2025-03-29 | dapope.com | General | -- |
| 2025-03-29 | Town of Orangeville | General | -- |
| 2025-03-21 | https://www.orangeville.ca | General | -- |
| 2025-02-17 | https://www.dapope.com/ | General | -- |
| 2025-02-04 | Massachusetts Municipal Wholesale Electric | General | -- |
| 2024-12-11 | http://midwest.com | General | -- |
| 2024-12-09 | http://copresi.es | General | -- |
| 2024-11-28 | https://jtekt-na.com/ | General | -- |
| 2024-11-27 | http://www.gsd200.org | General | -- |
| 2024-11-24 | co.cullman.al.us | General | -- |
| 2024-11-23 | https://www.co.cullman.al.us/ | General | -- |
| 2024-11-18 | https://www.eastgateauto.com/ | General | -- |
| 2024-11-18 | eastgateauto.com | General | -- |
| 2024-11-18 | kciaviation.com | General | -- |
| 2024-11-18 | http://betrvom4agzebo27bt7o3hk35tvr7ppw3hrx5xx4ecvijwfsb4iufoyd.onion/kciaviation.com/ | General | -- |
| 2024-11-17 | hetrhedens.nl | General | -- |
| 2024-11-17 | http://www.hetrhedens.nl | General | -- |
| 2024-11-16 | https://www.brandywinecoachworks.com/ | General | -- |
| 2024-11-16 | http://www.billyheromans.com | General | -- |
| 2024-11-16 | http://www.kapurinc.com | General | -- |
| 2024-11-15 | klarenbeek-transport.nl | General | -- |
| 2024-11-15 | kenmore.com | General | -- |
| 2024-11-15 | https://klarenbeek-transport.nl/ | General | -- |
| 2024-11-15 | https://www.surgicalassociates.com/ | General | -- |
| 2024-11-15 | https://www.billyheromans.com/ | General | -- |
| 2024-11-15 | https://www.kenmore.com/ | General | -- |
| 2024-11-15 | https://www.marysville.k12.oh.us | General | -- |
| 2024-11-15 | kapurinc.com | General | -- |
| 2024-11-13 | stalyhill-inf.tameside.sch.uk | General | -- |
| 2024-11-13 | https://www.stalyhill-inf.tameside.sch.uk/ | General | -- |
| 2024-11-12 | https://steppingstonesd.org/ | General | -- |
| 2024-11-12 | jst.es | General | -- |
| 2024-11-12 | https://jst.es/ | General | -- |
| 2024-11-12 | jarrellimc.com | General | -- |
| 2024-11-12 | https://jarrellinc.com/ | General | -- |
| 2024-11-11 | Supply Technologies | General | -- |
| 2024-11-11 | https://www.supplytechnologies.com/ | General | -- |
| 2024-11-11 | https://www.maxxis.com/ | General | -- |
| 2024-11-11 | Maxxis International | General | -- |
| 2024-11-11 | dezinecorp.com | General | -- |
| 2024-11-11 | https://dezinecorp.com | General | -- |
| 2024-11-02 | SVP Worldwide | General | -- |
| 2024-11-02 | http://svpworldwide.com | General | -- |
| 2024-10-29 | nathcompanies.com | General | -- |
| 2024-10-29 | https://nathcompanies.com/ | General | -- |
| 2024-10-28 | http://aerotecnic.com | General | -- |
| 2024-10-28 | marysville.k12.oh.us | General | -- |
| 2024-10-26 | wescan-services.com 760 GB | General | -- |
| 2024-10-26 | https://wescan-services.com | General | -- |
| 2024-10-25 | lolaliza.com | General | -- |
| 2024-10-25 | lolaliza.com - 250kk | General | -- |
| 2024-10-25 | deschampsimp.com | General | -- |
| 2024-10-25 | omara-ag.com | General | -- |
| 2024-10-25 | nrcs.net | General | -- |
| 2024-10-25 | https://www.zyloware.com/ | General | -- |
| 2024-10-25 | https://www.omara-ag.com/ | General | -- |
| 2024-10-25 | https://www.nrcs.net/ | General | -- |
| 2024-10-25 | https://www.deschampsimp.com/ | General | -- |
| 2024-10-25 | zyloware.com | General | -- |
| 2024-10-25 | unitedsprinkler.com | General | -- |
| 2024-10-25 | https://unitedsprinkler.com/ | General | -- |
| 2024-10-23 | copresi.es | General | -- |
| 2024-10-22 | http://www.aerotecnic.com | General | -- |
| 2024-10-21 | http://teddy.it | General | -- |
| 2024-10-21 | Teddy SpA | General | -- |
| 2024-10-20 | billyheromans.com | General | -- |
| 2024-10-19 | https://www.rcschools.net | General | -- |
| 2024-10-19 | https://mopsohio.com/ | General | -- |
| 2024-10-19 | http://www.kchospice.org | General | -- |
| 2024-10-19 | rcschools.net | General | -- |
| 2024-10-19 | mopsohio.com | General | -- |
| 2024-10-19 | Kansas City Hospice | General | -- |
| 2024-10-18 | http://neighborscu.org | General | -- |
| 2024-10-11 | http://vra.com | General | -- |
| 2024-10-11 | JTEKT NORTH AMERICA | General | -- |
| 2024-10-09 | surgicalassociates.com | General | -- |
| 2024-10-08 | Grandview School District | General | -- |
| 2024-10-07 | steppingstonesd.org | General | -- |
| 2024-10-05 | wescan-services.com | General | -- |
| 2024-10-04 | https://genproinc.com/ | General | -- |
| 2024-10-02 | http://branhaven.com | General | -- |
| 2024-10-02 | brandywinecoachworks.com | General | -- |
| 2024-09-30 | https://decalesp.com | General | -- |
| 2024-09-30 | decalesp.com | General | -- |
| 2024-09-27 | http://www.lolaliza.com | General | -- |
| 2024-09-25 | http://menningerclinic.org | General | -- |
| 2024-09-24 | cottlesinc.com | General | -- |
Showing 100 most recent disclosures of 359 total records. Use the Live Feed or API for complete records.