Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Blackfield

| Active

None

Victims
2
 
First Victim
2026-06-29
(est. attack date)
Discovery Date
2026-06-29
 
Last Seen
2026-07-03
 
Inactive Since
46
days
Avg Delay
N/A
attack→claim
Infostealer
100.0%
victims with domain
Countries
2
hit
Uptime
0.0% avg (30d)
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months (based on attack estimated date if available)

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon BlackField - Ransomware Leak Site No 2026-08-13T07:35:40 2mgkz2ntx5vpgt4jj4gir77eqx7g6owapm2mkzpjswyl74fni7jgdmyd.onion

Target
Top 5 Activity Sectors
  • Manufacturing 2
Top 5 Countries
  • BR flag Brazil 1
  • TW flag Taiwan, Province of China 1

Heatmap

Ransom Notes (1)

Indicators of Compromise (IoCs) (4)
Email 3 tox 1
Type IOC
Email blackflsupp@atomicmail.io
Email gentlemanhex@mail2tor.co
Email yagamuchi@mailum.com
tox 1C544E49D9352864E62F1BED8AC4671F5A7DCFAD5730425CD21B24C11EEE8600D0D8C6854B80

Victims (2)
Logo
Discovered: 2026-07-03 (1mo ago)
Redeplast is a Brazilian footwear manufacturer with over 20 years of experience in the industry. The…
Logo
Discovered: 2026-06-29 (1mo ago)
Nidec Chaun-Choung Technology Corporation (CCIC) is a Taiwan-based company specializing in the d...…