BlackSuit

Reports

First seen

Apr 10

Last seen

Jun 1

Motivation

financial

Top ATT&CK techniques

T1110 Brute Force ×2T1021 Remote Services ×2T1087 Account Discovery ×2T1486 Data Encrypted for Impact ×2T1566 Phishing ×2T1078 Valid Accounts ×2T1021.001 Remote Services: Remote Desktop Protocol ×1T1555 Credentials from Password Stores ×1T1003 OS Credential Dumping ×1T1018 Remote System Discovery ×1T1569.002 System Services: Service Execution ×1T1562 Impair Defenses ×1

Indicators

filename ×49cve ×35domain ×6ip_v4 ×2hash_sha1 ×1hash_sha256 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Weekly Cyber Recap: PAN-OS Exploit, Gogs RCE, GlassWorm C2 Takedown, AI-Driven Attacks

The Hacker NewsJun 1 High

State of ransomware in 2026: post-quantum cryptography, encryptionless extortion, and industrialized access brokers

Kaspersky SecurelistMay 12 High

EDR Killers Explained: Beyond the Drivers — ESET's Analysis of 90 Active Tools

ESET WeLiveSecurityMar 19 High

Ransomware Initial Access Brokers Exposed: Infrastructure and Tradecraft Analysis

Huntress BlogApr 10

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.