- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1175 · blacklock-ransomware-operators
What it is
Security researchers have described BlackLock as a "rebranding" of the Eldorado ransomware operation.<sup>[Resecurity BlackLock March 25 2025]</sup> Unless otherwise noted, this object uses details from the existing "Eldorado Ransomware Operators" Group object.
Tools
The tools and malware families the sources tie to it.
- Archelaus Beta
- BLACKCOFFEE
- BlackEnergy
- BlackHole
- BlackNix
- Blackshades