Blackruby
- First seen
- 2018-02-13 00:00:00
- Malware type
- ransomware, cryptominer
- Family
- Malware family
- Profile updated
- 2026-07-07 13:41:40
Context
Blackruby is a ransomware that encrypts files and demands payment for decryption. It is known to also install a cryptocurrency miner on infected systems, utilizing victim machines for mining operations alongside its primary ransomware functionality.
Reports & references
- bleepingcomputer.com — Black Ruby Ransomware Skips Victims In Iran And Adds A Miner For Good Measure (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Blackruby (report)
- acronis.com — Black Ruby Combining Ransomware And Coin Miner Malware (report)