Ransomware Group

BlackMatter

Also known as: BlackMatter Ransomware

Status: inactive • First seen 2021-0750+ known victims

BlackMatter was formed by DarkSide members but quickly shut down due to pressure.

Overview

BlackMatter was a short-lived RaaS combining DarkSide and REvil tactics.

Target Industries

Agriculture, Manufacturing, Technology

How They Attack

  • Initial access brokers
  • Credential theft
  • Cobalt Strike

Notable Victims

NEW Cooperative (2021), Olympus (2021)

Is your business exposed?

How to Protect Against BlackMatter

  1. 1.

    Monitor for successor groups

MITRE ATT&CK Techniques

T1078, T1486, T1059

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required