BlackMagic

First seen
2021-02-15 00:00:00
Malware type
ransomware
Profile updated
2026-07-07 14:49:33

Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector education-and-nonprofits

Targeted regions: country_code:us country_code:de country_code:fr

Context

BlackMagic is a ransomware that encrypts files on the infected system, demanding a ransom for decryption. It primarily targets sectors like finance, healthcare, governments, and education in regions such as the US and parts of Europe.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Blackmagic_Auto (yara-rule)

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Blackmagic (report)
  • blog.cyble.com — A Closer Look At Blackmagic Ransomware (report)

External references