Blacknevas
Blacknevas is a ransomware group with a financial motive, tracked by Brandefense. It targets 13 sectors, including Technology and Manufacturing, in 10 countries, including the United States and France. It uses 3 MITRE ATT&CK techniques.
Also known as
- Trial Recovery
- Techniques
- 3
- Exploited CVEs
- No CVE data
- First seen
- Nov 1, 2024
- Last seen
- Sep 8, 2026
- Record updated
Who They Target.
Sectors · 13
Labelsbdef-qf:latest
About Blacknevas.
BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.