Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

BLACK-SUIT · Threat actor profile

// THREAT ACTOR

BLACK-SUIT_

Dormant

BLACK-SUIT is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of BLACK-SUIT — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

191 Victims tracked
0 / 18 Active mirrors
2023-06-18 First listing
2025-06-02 Most recent

Victims by year

  • 2025 9
  • 2024 162
  • 2023 20

Leak site mirrors

18 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion This Site Has Been Seized snapshot · 2026-06-23 22:03
  • c7jpc6h2ccrdwmhofuij7kz6sr2fg2ndtbvvqy4fse23cf7m2e5hvqid.onion This Site Has Been Seized snapshot · 2026-06-23 22:30
  • nz2ihtemh2zli2wc3bovzps55clanspsqx5htu2plolby45a7pk4d3qd.onion 403 Forbidden snapshot · 2025-07-24 12:01
  • qjdremetxo2zpli32exwb5uct6cjljyj7v52d5thn7usmj5mlyxdojqd.onion 403 Forbidden snapshot · 2025-07-24 11:11
  • yef4xoqj2jq554rqetf2ikmpdtewdlbnx5xrtjtjqaotvfw77ipb6pad.onion snapshot · 2024-10-03 01:50
  • ptsfbwx5j7kyk5r6n6uz4faic43jtb55sbls7py5wztwbxkyvsikguid.onion 403 Forbidden snapshot · 2025-07-24 12:00
  • ro4h37fieb6oyfrwoi5u5wpvaalnegsxzxnwzwzw43anxqmv6hjcsfyd.onion snapshot · 2024-10-16 13:00
  • cyfafnmijhiqxxfhtofmn5lgk3w5ana6xzpc6gk5uvdfadqflvznpjyd.onion 403 Forbidden snapshot · 2025-07-24 12:00
  • betrvom4agzebo27bt7o3hk35tvr7ppw3hrx5xx4ecvijwfsb4iufoyd.onion 403 Forbidden snapshot · 2025-07-24 11:07
  • ybo3xr25btxs47nmwykoudoe23nyv6ftkcpjdo4gilfzww4djpurtgid.onion 403 Forbidden snapshot · 2025-07-24 12:02
  • k6wtpxwq72gpeil5hqofae7yhbtxphbkyoe2g7rwmpx5sadc4sgsfvid.onion Index of / snapshot · 2025-07-02 04:06
  • vm2rbvfkcqsx2xusltbxziwbsrunjegk6qeywf3bxpjlznq622s3iead.onion 403 Forbidden snapshot · 2025-07-24 12:04
  • ng2gzceugc2df6hp6s7wtg7hpupw37vqkvamaydhagv2qbrswdqlq6ad.onion snapshot · 2025-05-09 03:19
  • 2yxf2ald2c67twt4663piypum2fu6yt4su453naxsdiilpd4m7pgu6qd.onion Index of / snapshot · 2025-07-02 04:06
  • wjdnuogx3mrnnutshrx7nbvjuwqfxnrb32rifaozygwdvs325s75keqd.onion Index of / snapshot · 2025-07-02 04:05
  • wxqhwn52dnzbrtqeywg35jfvzbpwkw7edlxxoil7ag44plraezw5z5id.onion 403 Forbidden snapshot · 2025-09-01 00:09
  • 5bol522hpd3yknxfct2o35ilimxyo46licxxitjvajtvcedltfrj53qd.onion 403 Forbidden snapshot · 2025-08-31 23:20
  • weg7sdx54bevnvuLapqu6bpzwztryeflq3s23trgbmnhkbpqz637f2yd.onion snapshot · 2025-07-26 20:43

Recent victims

The 50 most recent victims claimed by BLACK-SUIT. Total in the index: 191.

Date listed Victim Description
2025-06-02 Kansas City Aviation Center Founded in 1968, the Kansas City Aviation Center offers a range of avi…
2025-05-29 metromont.com Commercial & Residential Construction.Revenue $636.5 MillionFounded in…
2025-05-29 Inns of Aurora Inns of AuroraHospitalityRevenue$33.9 Millioninns of aurora is a refin…
2025-05-15 Gloucester County Virginia The Committee is comprised of residents of Gloucester County who are a…
2025-04-24 Pacific Metallurgical
2025-04-24 The Fortune Society
2025-04-04 Massachusetts Municipal Wholesale Electric In the early 1970s, MMWEC worked to gather and focus the collective st…
2025-03-21 Town of Orangeville
2025-02-17 dapope.com
2024-12-11 midwest.com
2024-12-09 copresi.es
2024-11-28 JTEKT NORTH AMERICA 893.63GB of DataIncluding data from companies such as BMW, Caterpillar…
2024-11-27 Grandview School District The Grandview School District, with families and the community, will p…
2024-11-23 co.cullman.al.us
2024-11-18 eastgateauto.com
2024-11-18 kciaviation.com KCI Aviation's headquarters is in Taylor County at 1211 AFG Road, Brid…
2024-11-17 hetrhedens.nl hetrhedens.nl Industry       Education Revenue        $21.2 Million H…
2024-11-16 kapurinc.com kapurinc.com Industry       Construction Revenue        $56 Million H…
2024-11-16 brandywinecoachworks.com brandywinecoachworks.com Industry       Automotive Service Revenue   …
2024-11-16 klarenbeek-transport.nl klarenbeek-transport.nlIndustry    ManufacturingRevenue    $5.3 Millio…
2024-11-16 surgicalassociates.com surgicalassociates.com Industry       Healthcare Revenue        $5 Mi…
2024-11-16 billyheromans.com billyheromans.com Industry       Retail Revenue        $19.6 Million …
2024-11-16 kenmore.com kenmore.comIndustry    ManufacturingRevenue    $5 MillionHeadquarters …
2024-11-15 marysville.k12.oh.us marysville.k12.oh.us  121 GB Industry         Education Employees    …
2024-11-13 stalyhill-inf.tameside.sch.uk Stalyhill Infants is a very special school and we hope that you soon f…
2024-11-12 steppingstonesd.org steppingstonesd.org Industry      Healthcare Revenue       $9 Million…
2024-11-12 jst.es J.S.T. España, S.A., founded in 1981, belongs to the Japanese multinat…
2024-11-12 jarrellimc.com jarrellimc.com   144 GB Industry         Real Estate Employees        …
2024-11-11 Supply Technologies Supply Technologies, a subsidiary of ParkOhio(NASDAQ:PKOH), specialize…
2024-11-11 Maxxis International Founded in Taiwan, Maxxis got its start by making bicycle tires, and s…
2024-11-11 dezinecorp.com DezineCorp has been a trusted supplier of decorated promotional produc…
2024-11-02 SVP Worldwide SVP Worldwide, founded in 2004 and headquartered in Lavergne, Tennesse…
2024-10-29 nathcompanies.com
2024-10-28 AEROTECNIC Who is AEROTECNIC? AEROTECNIC is a dynamic, flexible and highly qualif…
2024-10-26 wescan-services.com 760 GB Industry     Construction Employees    500 Revenue     $22.4 Milli…
2024-10-26 wescan-services.com
2024-10-25 lolaliza.com At LolaLiza, we believe that outer appearance reflects the inner soul,…
2024-10-25 zyloware.com About: Website www.zyloware.com Headquarters 8 Slater St, Port Chester…
2024-10-25 omara-ag.com About: Website www.omara-ag.com Headquarters 1626 Delaware Ave, Des Mo…
2024-10-25 nrcs.net About: Website www.nrcs.net Nicole Roth Current Workplace Company Nort…
2024-10-25 deschampsimp.com About: Website www.deschampsimp.com Headquarters 9660 Boul Du Golf, An…
2024-10-25 unitedsprinkler.com Headquarters 80 Potomac Creek Dr, Fredericksburg, Virginia, 22405, Uni…
2024-10-22 Aerotecnic EROTECNIC is a dynamic, flexible and highly qualified company whose MI…
2024-10-21 Teddy SpA Gruppo Teddy offers clothing and accessories for men, women, and child…
2024-10-19 rcschools.net rcschools.net https://www.zoominfo.com/c/rutherford-county-schools/212…
2024-10-19 mopsohio.com
2024-10-19 Kansas City Hospice
2024-10-18 Neighbors Credit Union Neighbors Credit Union is a not-for-profit, full service financial ins…
2024-10-12 Volta River Authority The Volta River Authority generates, transmits and distributes electri…
2024-10-04 GenPro Inc. "Genpro, Inc. is an integrated 3PL with over 30 years of experience an…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.