Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Inactive · #283 by victimsRansomware group
Blacktor
As of Oct 19, 2026, Blacktor has listed 4 confirmed victims on its leak site since Jul 11, 2025, 0.0% of all victims tracked by Brandefense.
Blacktor is a low-profile data breach and extortion group active around 2021 with a Tor-based leak site, claiming victims in Indonesia, Italy, Venezuela, and the US, with minimal public threat-intelligence coverage.
Is My Company Listed?Follow BlacktorRequest IOC FeedTTPs, CVEs and malware →
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 4
- Rank By Victims
- #283
- Last Leak-Site Post
- Jul 11, 2025
- Top Country
- Unknown
- Top Sector
- Unknown
Victims Posted Per Month.
0
0
0
0
0
0
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
0
0
0
0
0
0
0
0
0
0
0
0
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
4
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
| Month | Confirmed victims |
|---|---|
| July 2025 | 4 |
| August 2025 | 0 |
| September 2025 | 0 |
| October 2025 | 0 |
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Blacktor Victims.
Search all 4 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| ticketclub-it | Unknown | Unknown | Not stated | |
| bankjatim-co-id | Unknown | Unknown | Not stated | |
| salesplaypos-com | Unknown | Unknown | Not stated | |
| unexca-edu-ve | Unknown | Unknown | Not stated |
How They Operate.
Blacktor's threat actor profile lists 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →History.
First seen in Brandefense data
Busiest month on record: 4 confirmed victims
First confirmed victim listed on its leak site
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.