Blackout
| Active
Blackout is a ransomware group that first appeared in early 2024, initially claiming attacks against healthcare entities in Canada, France, and Germany before expanding to telecommunications, mining, and manufacturing sectors, operating a double-extortion model with a data leak site.
Victims
12
First Victim
2024-02-26
(est. attack date)
Discovery Date
2024-02-26
Last Seen
2026-07-19
Inactive Since
54
days
Avg Delay
3
days
Infostealer
16.7%
victims with domain
Countries
9
hit
Uptime
97.7% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Blackout Blog | Yes | 2026-09-11T00:20:43 | nginx |
black3gnkizshuynieigw6ejgpblb53mpasftzd6pydqpmq2vn2xf6yd.onion
|
Target
Top 5 Activity Sectors
- Professional Services 3
- Healthcare 3
- Technology 2
- Transportation 1
- Government & Defense 1
Top 5 Countries
-
Greece
2
-
France
2
-
Japan
1
-
United States
1
-
United Kingdom
1
Heatmap
YARA Rules (1)
Victims (12)
Miatech is a US-based company that provides passenger travel services for...…
Bluebell Group is a Hong Kong-based, family-owned omnichannel brand curat... Leak deadline: 2026-08-…
Neda Maritime is an independent shipping company that manages and operate...…
CDC Biodiversité is a French environmental protection company making tens...…
Antaeus Travel is a travel agency specializing in corporate and sea trave...…
We carried out an attack on mcmtelecom.com, a b2b telecommunications prov...…
Why don't medical companies pay us? As usual we got into the network ht-h...…
First post on our new blog ! We encrypted 100+ servers and workstations ...…
