blacknevas
ransomware group
BlackNevas ransomware — also referred to as “Trial Recovery” — was first observed in November 2024. It is a direct derivative of the Trigona ransomware family and continues the lineage's focus on extortion over public shaming. BlackNevas operators support a double-extortion model, encrypting files using AES-256 with RSA-4112-protected keys, and appending the .-encrypted or .ENCRYPTED file extension to affected files. Hybrid payloads are available for Windows, Linux, NAS, and VMware ESXi platforms. <br/> <br/>While BlackNevas does not host its own data leak site, it reportedly collaborates with other ransomware groups for data publication — known partners include Kill Security, Hunters International, DragonForce, Blackout, Embargo Team, and Mad Liberator. The group has predominantly targeted large enterprises in sectors such as finance, telecommunications, manufacturing, healthcare, and legal. Initial access is commonly achieved via phishing or exploitation of vulnerabilities, with lateral movement facilitated through SMB enumeration and optional LAN-wide propagation.
Group Activity
Last 12 monthsVictims (29)
PROMOSFERA S.R.l.
passports, employee and client documents, databases of promotional participants - hundreds of thousands of emails + full names, tens of thousands of emails + fu...
KINAS SOLICITORS
In stock: 158930+ filedata size: 138+ GBClients' and companies' data. All accompanying documents for the provision of legal services.https://upload.disroot.org/...
Paramount Health Services & Insurance TPA Pvt. Ltd
listing fileshttps://gofile.io/d/d34YJQThe website paramounttpa.com belongs to Paramount Health Services & Insurance TPA Pvt. Ltd., a health insurance third-par...
MST (Sanko Makina and ASKO Holding)
The company MST (Sanko Makina and ASKO Holding) has direct and close ties to the Turkish defense industry. It serves as an important supplier of specialized mil...
E-CON Packaging Private Limited
312367 files300GBhttps://gofile.io/d/3nrP9GE-CON Packaging Private Limited,established in 1997 and based in Mumbai, is a leading manufacturer and supplier of in...
Heng An Standard Life Insurance
Downloaded:Complete Client Database: Unencrypted records containing full names, addresses, scanned identification documents (passports, driver’s licenses), and ...
Bohmler Einrichtungshaus GmbH
Revenue
Carrera Casting Corp.
• 3 terabytes of corporate data for free. Download it now while it's still available.• Please wait 2 -3 days while files are uploaded to the site.• Brief Overvi...
Applied LNG
file listing https://gofile.io/d/wsV8hlApplied LNG specializes in providing liquefied natural gas (LNG) solutions for various energy needs, including equipment ...
LATCOM
Revenue:
Yateem Group
Revenue:
Trojan Construction & Holding Group
Revenue:
Undefasa
Ceramicists since 1967We are a family-run business that was established in the heat of the Sierra, and since then Undefasa has made its mark at the heart of Spa...
T. Choithram And Sons, LLC
Revenue:
Caresoft Global
Revenue:
CARTONAJES BERNABEU SAU
Revenue:
OftalTech Solutions
OftalTech Solutions is a leading distributor of ophthalmic products, operating at both national and international levels, primarily in Spain and Portugal. The c...
SISTRAN Consultores
Revenue:
TOYOTA ASIA TOYOTA INDIA
Revenue:
Payme Ltd
Revenue:
LEARN is a Regional Educational Service Center
Revenue:
CLEARSYNTH LABS LIMITED
Revenue:
Cash and carry - COSAEN GRUP
Revenue:
Quality Data Service, Inc.
Today, we’re opening the auction.Over the past several weeks, we’ve completed a full exfiltration from the infrastructure of Quality Data Service, Inc., Connect...
Dragonfly CO. LTD
Revenue:
CILI
Revenue:
CHABAA BANGKOK
Revenue:
CK Power Public Company Limited
Revenue:
TANI & ABE
Revenue:
Infrastructure
http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onionnever crawled
http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion/publicationsnever crawled