GINC-APT-0654 · Criminal

Blacktail

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0654 · blacktail

What it is

Blacktail is a cybercrime group that has gained attention for its ransomware campaigns, particularly the Buhti ransomware. They are known for using custom-built data exfiltration tools and have been observed exploiting vulnerabilities in both Windows and Linux systems.

Tools

The tools and malware families the sources tie to it.

  • BLACKCOFFEE
  • BlackEnergy
  • BlackHole
  • BlackNix
  • Blackshades
  • Cyber Eye RAT
  • CyberGate
  • Windows Remote Desktop
  • Xploit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de