Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

BLACK-NEVAS · Threat actor profile

// THREAT ACTOR

BLACK-NEVAS_

Active

BLACK-NEVAS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of BLACK-NEVAS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

35 Victims tracked
1 / 1 Active mirrors
2025-08-06 First listing
2026-04-30 Most recent

Victims by year

  • 2026 10
  • 2025 25

Leak site mirrors

1 mirror tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion DLS snapshot · 2026-08-06 21:17

Recent victims

The 50 most recent victims claimed by BLACK-NEVAS. Total in the index: 35.

Date listed Victim Description
2026-04-30 Bohmler Einrichtungshaus GmbH
2026-04-15 Carrera Casting Corp.
2026-03-27 PROMOSFERA S.R.l.
2026-03-27 Quality Data Service, Inc.
2026-03-27 KINAS SOLICITORS
2026-03-27 Paramount Health Services & Insurance TPA Pvt. Ltd
2026-03-27 The company MST (Sanko Makina and ASKO Holding)
2026-03-27 E-CON Packaging Private Limited
2026-03-27 Heng An Standard Life Insurance
2026-01-08 Applied LNG www.appliedlng.com file listing https://gofile.io/d/wsV8hlApplied LNG specializes in prov…
2025-10-30 LATCOM https://latcom.com/latcom/ LATCOM.com145146 files, 1TBhttps://gofile.io/d/xNrNCufile listing, we …
2025-10-29 Yateem Group www.yateemgroup.com 500+ gigabytes and over 100,000+ files availableThe Yateem Group owns …
2025-10-27 Trojan Construction & Holding Group www.trojan.ae Over 3 terabytes of project and financial reporting data for 2024–2025…
2025-10-13 Undefasa www.undefasa.com Ceramicists since 1967We are a family-run business that was establishe…
2025-10-07 T. Choithram And Sons, LLC www.choithrams.com/www.choithramsgcc.com Choithrams is a prominent grocery retail chain and distributor in the …
2025-09-29 Caresoft Global caresoftglobal.com Caresoft Global is a global engineering company specializing in soluti…
2025-09-11 CARTONAJES BERNABEU SAU www.cartonajesbernabeu.com serviced by IT company Verne Group www. serviced by IT company Verne Group www.vernegroup.com (Cybersecurity a…
2025-09-06 OftalTech Solutions oftaltech.com OftalTech Solutions is a leading distributor of ophthalmic products, o…
2025-09-01 SISTRAN Consultores www.sistran.com 538k files1.1TBlisting data https://gofile.io/d/r8a9GVThe company spec…
2025-08-28 TOYOTA ASIA TOYOTA INDIA Hello,I think your IT service hid from you information about the hacki…
2025-08-07 LEARN is a Regional Educational Service Center www.learn.k12.ct.us LEARN is a Regional Educational Service Center working with and for it…
2025-08-07 Cash and carry - COSAEN GRUP www.cosaen.es Cash and carry - COSAEN GRUPProfessionals in the food sectorюCosaen Gr…
2025-08-07 Dragonfly CO. LTD dragonflygame.com Dragonfly is a South Korean video game developer and publisher based i…
2025-08-06 TANI & ABE www.taniabe.co.jp TANI & ABE is a patent and trademark law firm established in 1977 and …
2025-08-06 CK Power Public Company Limited www.ckpower.co.th CK Power Public Company Limited, through its subsidiaries, generates a…
2025-08-06 CHABAA BANGKOK www.chabaabangkok.com Chabaa is the leading expert in fruit beverage production. 700 GB o…
2025-08-06 CILI www.cili.lt "cili.lt" is associated with Čili, a restaurant chain that operates in…
2025-08-06 Dragonfly CO. LTD dragonflygame.com Dragonfly is a South Korean video game developer and publisher based i…
2025-08-06 Quality Data Service, Inc. www.qds.biz Today, we’re opening the auction. Over the past several weeks, we’v…
2025-08-06 KINAS SOLICITORS kinas.co.uk In stock: 158930+ file data size: 138+ GB Clients' and companies…
2025-08-06 Cash and carry - COSAEN GRUP www.cosaen.es Cash and carry - COSAEN GRUP Professionals in the food sectorю C…
2025-08-06 PROMOSFERA S.r.l. promosfera.com passports, employee and client documents, databases of promotional par…
2025-08-06 CLEARSYNTH LABS LIMITED www.clearsynth.com In stock: 2153940 file data size: 762GB Developments, formulas, …
2025-08-06 LEARN is a Regional Educational Service Center www.learn.k12.ct.us LEARN is a Regional Educational Service Center working with and for it…
2025-08-06 Payme Ltd www.payme.co.uk Payme Ltd is a CIS payroll and contracting company with FCSA and profe…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.