Uptime Hamster: 16d 5h 35mDeploy: 14 Jul 2026 21:26Updated: 2026-07-14
Logo del actor de amenaza blackshadow

blackshadow

2 incidentes 1 paises 1 sectores ransomware IR Ultimo: 2026-06-29
Aliases: Agrius
Ver en IntelTracker → APTTrail →
Black Shadow is a politically motivated cyber-espionage and extortion group assessed with high confidence to be linked to Iranian government interests, specifically attributed to Iran's Ministry of Intelligence and Security. The group emerged with observable activity dating back to early 2019, gaining public notoriety in late 2020 through a series of high-profile attacks against Israeli entities. Unlike typical financially motivated ransomware operations, Black Shadow often employs a hybrid motivation, combining financial extortion with information operations aimed at disruption and public shaming, particularly targeting Israeli citizens and organizations. A defining characteristic of the group is its strategic use of media exploitation, leveraging Telegram channels and news outlets to publicize breaches, leak sensitive data, and exert pressure on victims and their governments, often magnifying the perceived impact of their cyberattacks.

Aliases del actor

Agrius

Actores similares

agriusactor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownransomware.anggipradana.comRansomware Group: blackshadow
Malware asociado
MultiLayer Wiper, Mimikatz, win.apostle, BFG Agonizer
Tecnicas MITRE
T1505.003, T1543.003, T1543, T1140, T1562.001, T1018
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (2)

Paises objetivo (SOCRadar)

United Arab EmiratesGermanyIsraelLebanonRussian FederationSaudi ArabiaTurkeyUnited States

Sectores atacados

Medical (1)

Sectores objetivo (SOCRadar)

Other Information ServicesRail TransportationSoftware PublishersAccommodationManufacturingPublic AdministrationEducational ServicesWholesale TradeData Processing ServicesInternet Publishing

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com