Skip to content
RansomwareFinancialAdvanced sophistication · Organisation

BlackByte

BlackByte is a ransomware group with a financial motive, tracked by Brandefense. It targets 18 sectors, including Government and Technology, in 28 countries, including the United States and the United Kingdom. It uses 84 MITRE ATT&CK techniques and exploits 7 known CVEs.

Also known as
  • blackbyte Team
  • Hecamede
Techniques
84
Exploited CVEs
7
First seen
Jan 1, 2021
Last seen
Aug 28, 2024
Record updated

Who They Target.

Labelsblackbyteransomware

About BlackByte.

Ransomware. Uses dropper written in JavaScript to deploy a.NET payload.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.