BlackSuit (Windows)
- First seen
- 2023-06-15 00:00:00
- Malware type
- ransomware
- Last IoC activity
- 2026-07-16 07:55:43
- Profile updated
- 2026-07-07 13:15:31
Targeted industries: healthcare-and-pharmaceutical education-and-nonprofits manufacturing government-and-public-sector
Context
According to Trend Micro, this ransomware has significant code overlap with Royal Ransomware.
Reports & references
- catalyst.prodaft.com — Overview (report)
- Trend Micro — Investigating Blacksuit Ransomwares Similarities To Royal (report)
- blog.cyble.com — Blacksuit Ransomware Strikes Windows And Linux Users (report)
- bleepingcomputer.com — Law Enforcement Seizes Blacksuit Ransomware Leak Sites (report)
- redsense.com — Royal Blacksuit How Ransomware Rebrand Reshaped Them (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Blacksuit (report)
- reliaquest.com — Blacksuit Attack Analysis (report)
- thedfirreport.com — Blacksuit Ransomware (report)