blackmatter Ransomware
Tracked since Sep 8, 2021
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Ransomware-as-a-Service
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Tactics and techniques (MITRE ATT&CK)
Initial Access
T1078 Valid Accounts Execution
T1047 Windows Management InstrumentationT1053.005 Scheduled Task/Job: Scheduled Task Defense Evasion
T1027 Obfuscated Files or InformationT1562.001 Disable or Modify Tools Credential Access
T1003 OS Credential Dumping Discovery
T1082 System Information DiscoveryT1135 Network Share Discovery Lateral Movement
T1021.001 Remote Services: Remote Desktop ProtocolT1021.002 Remote Services: SMB/Windows Admin Shares Exfiltration
T1567.002 Exfiltration Over Web Service: Exfiltration to Cloud Storage Command and Control
T1071.001 Application Layer Protocol: Web Protocols Impact
T1486 Data Encrypted for ImpactT1490 Inhibit System Recovery Observed tools
Exfiltration
PrivatLab
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live