Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Blacklocks

New Group | Active

This is an emerging group, so claims should be treated with caution until independently verified.
None

Victims
1
 
First Victim
2026-09-01
(est. attack date)
Discovery Date
2026-09-05
 
Last Seen
2026-09-05
 
Inactive Since
0
days
Avg Delay
4
days
Infostealer
100.0%
victims with domain
Countries
1
hit
Uptime
100.0% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)
1 victim this month

Known Locations (2)
Favicon Title Type Available Last Visit Server Info FQDN Status
favicon BLACKLOCKS Yes 2026-09-05T11:00:49 NGINX nginx 1.24.0 ybvjht7qcuhcml4pjcs7fgk57tzysplqtfq4i7yrwc6vjilin2dt2qad.onion/leaks
favicon BLACKLOCKS Yes 2026-09-05T10:59:57 NGINX nginx 1.24.0 ybvjht7qcuhcml4pjcs7fgk57tzysplqtfq4i7yrwc6vjilin2dt2qad.onion

Target
Top 5 Activity Sectors
  • Manufacturing 1
Top 5 Countries
  • KR flag Korea, Republic of 1

Heatmap

Indicators of Compromise (IoCs) (2)
Session 1 Tox 1
Type IOC
Session 05e07c024731f0f399be3d76befac73ebbc69272759ada392a38016dea3d7ca70e
Tox 43997DBDFD3C8B858B9BBD3A5B6BF16124D267582DCAB54E0BB2B34FF422141E79976C264248

Victims (1)
Logo
Discovered: 2026-09-05 (4h ago)  ·  Attack est.: 2026-09-01
Kwangmyung Industry is a manufacturing company established in 1985 that produces automotive parts, i…