Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Inactive · #325 by victimsRansomware group
Blackfield
As of Oct 19, 2026, Blackfield has listed 2 confirmed victims on its leak site since Jun 29, 2026, 0.0% of all victims tracked by Brandefense. Its most targeted country is Brazil (50.0% of its victims) and its most targeted sector is Consulting.
Is My Company Listed?Follow BlackfieldRequest IOC Feed
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 2
- Rank By Victims
- #325
- Last Leak-Site Post
- Jul 3, 2026
- Top Country
- Brazil
- Top Sector
- Consulting
Victims Posted Per Month.
1
1
0
0
0
| Month | Confirmed victims |
|---|---|
| June 2026 | 1 |
| July 2026 | 1 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
1
1
0
0
0
| Month | Confirmed victims |
|---|---|
| June 2026 | 1 |
| July 2026 | 1 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
1
1
0
0
0
| Month | Confirmed victims |
|---|---|
| June 2026 | 1 |
| July 2026 | 1 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Blackfield Victims.
Search all 2 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| redeplastrs.com.br redeplastrs.com.br | BRBrazil | Manufacturing | Not stated | |
| ccic.com.tw ccic.com.tw | TWTaiwan | Consulting | 2 TB |
MITRE ATT&CK.
3 techniques across 3 tacticsInitial Access1
- T1659
Content Injection
Exfiltration1
- T1567
Exfiltration Over Web Service
Impact1
- T1486
Data Encrypted for Impact
Arsenal.
- BlackfieldMalware
- EverestMalware
Who Blackfield Targets.
Countries
History.
Busiest month on record: 1 confirmed victims
First confirmed victim listed on its leak site
First seen in Brandefense data
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.