Ransomware Group intelligence
Blackwater
ActiveTrack Blackwater with 11 published victims and 1 known leak locations in a single intelligence view.
Overview
Blackwater is tracked by Breach House as a ransomware group with 11 published victims.
China is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ejzl7cjxmkx7lzhiqwidmrwtfjv45pkczbc4fnyaut3t7gll3yaiq5id.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (11)
Search, filter and paginate the victim timeline for Blackwater. Showing 1–11 of 11.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | msgas.com.br id30847 View details | Brazil | Energy | ||
|
msgas.com.br is a Brazilian company operating in the energy sector, providing various services to its customers. The company is based in Brazil and focuses on delivering energy solutions. msgas.com.br was listed as a ransomware victim associated with blackwater |
|||||
| Ransomware | msgas.com.br id30847 View details | Brazil | Energy | ||
|
customers' personal data, contract information, internal company data: http://ucfhnoihzgx4wz4beyzfxnh46cs37r4zbq627xyctykpatruvmghbyqd.onion/s/7f89713825a4376e/ |
|||||
| Ransomware | txdkj.com id30387 View details | China | Other | ||
|
txdkj.com is a Chinese entity operating in the other sector, providing various offerings. Located in China, the entity serves its purpose in the respective field. txdkj.com was listed as a ransomware victim associated with blackwater |
|||||
| Ransomware | txdkj.com id30387 View details | China | Other | ||
|
Confidential data will be released soon. |
|||||
| Ransomware | www.utourworld.com id29663 View details | Transportation / Travel / Logistics | |||
|
Confidential data will be published soon |
|||||
| Ransomware | medical-park id28087 View details | Türkiye | Healthcare / Medicine | ||
|
Medical Park Hastaneler Grubu is Turkey's leading healthcare group, operating 36 hospitals across 14 provinces with a workforce of 14,000 employees. They offer a wide range of medical services. |
|||||
| Ransomware | Minidoka Memorial Hospital id28321 View details | United States | NGOs / Associations | ||
|
Data will be published after 7 days. |
|||||
| Ransomware | Grupo EBD id28322 View details | Brazil | Transportation / Travel / Logistics | ||
|
All data will be published soon... |
|||||
| Ransomware | Shenzhen Gongjin Electronics id28323 View details | China | Manufacturing / Engineering | ||
|
Shenzhen Gongjin Electronics, founded in 1998 and also known as T&W, is a telecommunications manufacturing company specializing in broadband communication technology. |
|||||
| Ransomware | Compass Housing Alliance id28324 View details | United States | NGOs / Associations | ||
|
Compass Housing Alliance is dedicated to developing and providing essential services, shelter, and affordable housing to ensure that everyone in the community has a safe place to call home. |
|||||
| Ransomware | Tuopu id28325 View details | China | Manufacturing / Engineering | ||
|
Founded in 1983 and headquartered in Ningbo, China, Ningbo Tuopu Group Co., Ltd. is a multipurpose enterprise specializing in R&D, manufacturing, and sales of auto parts |
|||||