Ransomware Group intelligence

Blacknevas

Inactive

Track Blacknevas with 23 published victims and 1 known leak locations in a single intelligence view.

Victims 23 Known published victims in this dataset
First discovered 2025-08-06 Earliest victim discovery date
Last discovered 2026-01-08 Latest victim discovery date
Inactive since 107 days Days since the latest known victim
Top country United States 6 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Blacknevas is tracked by Breach House as a ransomware group with 23 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (23)

    Search, filter and paginate the victim timeline for Blacknevas.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Applied LNG id25369 View details United States Energy
    Ransomware LATCOM id23519 View details Argentina Communication / Marketing
    Ransomware Yateem Group id23466 View details Bahrain Public Sector
    Ransomware Trojan Construction & Holding Group id23407 View details United Arab Emirates Construction / Real Estate
    Ransomware Undefasa id23012 View details Spain Communication / Marketing
    Ransomware T. Choithram And Sons, LLC id22851 View details United States Communication / Marketing
    Ransomware Caresoft Global caresoftglobal.com id22655 View details United States Manufacturing / Engineering
    Ransomware CARTONAJES BERNABEU SAU www.cartonajesbernabeu.com serviced by IT company Verne Group www.... id22301 View details Spain Communication / Marketing
    Ransomware OftalTech Solutions oftaltech.com id22158 View details United States IT
    Ransomware SISTRAN Consultores id22075 View details Mexico Services
    Ransomware TOYOTA ASIA TOYOTA INDIA id22012 View details India Telecommunications
    Ransomware Payme Ltd id21581 View details United Kingdom Finance / Legal / Insurance
    Ransomware LEARN is a Regional Educational Service Center id21580 View details United States Education
    Ransomware CLEARSYNTH LABS LIMITED id21579 View details India Communication / Marketing
    Ransomware PROMOSFERA S.r.l. promosfera.com id21578 View details Italy Communication / Marketing
    Ransomware Cash and carry - COSAEN GRUP id21577 View details Spain Communication / Marketing
    Ransomware KINAS SOLICITORS kinas.co.uk id21576 View details United Kingdom Communication / Marketing
    Ransomware Quality Data Service, Inc. id21575 View details United States Communication / Marketing
    Ransomware Dragonfly CO. LTD dragonflygame.com id21574 View details Japan Retail / E-commerce
    Ransomware CILI id21573 View details Lithuania Hospitality / Food & Beverage / Tourism
    Ransomware CHABAA BANGKOK id21572 View details Thailand Communication / Marketing
    Ransomware CK Power Public Company Limited id21570 View details Thailand Energy
    Ransomware TANI & ABE id21569 View details Japan Finance / Legal / Insurance