- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0654 · blacktail
What it is
Blacktail is a cybercrime group that has gained attention for its ransomware campaigns, particularly the Buhti ransomware. They are known for using custom-built data exfiltration tools and have been observed exploiting vulnerabilities in both Windows and Linux systems.
Tools
The tools and malware families the sources tie to it.
- BLACKCOFFEE
- BlackEnergy
- BlackHole
- BlackNix
- Blackshades
- Cyber Eye RAT
- CyberGate
- Windows Remote Desktop
- Xploit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de