BlackNevas — Ransomware Profile
BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.Recent claimed victims
- Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach 2026-08-04
- Speed Group 2026-07-28
- Zuni Shopping Center, Inc. 2026-07-22
- L'azurde 2026-07-14
- Arkın Group 2026-07-14
- Abans Group 2026-07-01
- Arkin Group 2026-06-30
- Abans Group 2026-06-29
- Abans Finserv 2026-06-29
- The company MST (Sanko Makina and ASKO Holding) 2026-04-30
- Carrera Casting Corp. 2026-04-30
- Paramount Health Services & Insurance TPA Pvt. Ltd 2026-04-30
- KINAS SOLICITORS 2026-04-30
- Heng An Standard Life Insurance 2026-04-30
- PROMOSFERA S.R.l. 2026-04-30
- Bohmler Einrichtungshaus GmbH 2026-04-30
- E-CON Packaging Private Limited 2026-04-30