BlackNevas — Ransomware Profile
BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.Also tracked as
Trial Recovery
Tools & malware
- BlackNevas Ransomware
Recent claimed victims
- Optimum First Mortgage (Pear's acting group's promotional blog) 2026-09-16
- Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco... 2026-09-08
- ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l. 2026-08-14
- Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... 2026-08-13
- Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C... 2026-08-12
- COMPUTER COUNTRY AND NETWORKS 2026-08-12
- Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co... 2026-08-12
- Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT ... 2026-08-12
- OTEGROUP 2026-08-07
- Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach 2026-08-04
- Speed Group 2026-07-28
- Zuni Shopping Center, Inc. 2026-07-22
- L'azurde 2026-07-14
- Arkın Group 2026-07-14
- Abans Group 2026-07-01
- Arkin Group 2026-06-30
- Abans Group 2026-06-29
- Abans Finserv 2026-06-29
- E-CON Packaging Private Limited 2026-04-30
- Bohmler Einrichtungshaus GmbH 2026-04-30
- Carrera Casting Corp. 2026-04-30
- The company MST (Sanko Makina and ASKO Holding) 2026-04-30
- KINAS SOLICITORS 2026-04-30
- Paramount Health Services & Insurance TPA Pvt. Ltd 2026-04-30
- Heng An Standard Life Insurance 2026-04-30