Ransomware Group

BlackByte

Also known as: BlackByte 2.0

Status: active • First seen 2021-09200+ known victims

BlackByte attacks critical infrastructure. FBI has issued multiple warnings about them.

Overview

BlackByte targets critical infrastructure and was subject to FBI warnings.

Target Industries

Manufacturing, Government, Energy

How They Attack

  • ProxyShell exploitation
  • Cobalt Strike
  • Phishing

Notable Victims

San Francisco 49ers (2022)

Is your business exposed?

How to Protect Against BlackByte

  1. 1.

    Patch Exchange servers

MITRE ATT&CK Techniques

T1190, T1486, T1059

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required