Black Locks — Ransomware Profile
Black Locks is a newly surfaced extortion crew that the ransomware.live tracker first catalogued on 5 September 2026, when its Tor data-leak site published a single listing naming Kwang Myung Industrial, a South Korean maker of automotive seat frames, moulds and jigs, as a victim. The tracker flags it as an emerging group whose claims should be treated with caution, and records Session and Tox identifiers as its only known contact channels. As of early September 2026 IntelFusions found no vendor, CERT or press write-up describing the crew's tooling, affiliates or origin. Despite the similar name, no published research links it to BlackLock, the El Dorado rebrand profiled by ReliaQuest and Resecurity, and the two use separate leak-site infrastructure. IntelFusions first observed the group on its data-leak site in September 2026 and treats its listing as an unverified claim.
Recent claimed victims
Read the full analysis on IntelFusions