Back to Threat Groups

blackwater

ACTIVE

ransomware group

Blackwater is a ransomware group that first surfaced in early 2026, combining file encryption with data theft and target

Victims
10
records
First Discovered
Apr 12, 2026
victim
Last Discovered
Jul 25, 2026
victim
Inactive Since
31
days
Countries
4
hit
Avg Discount
β€”
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
6
Apr
2026
2
May
2026
Jun
2026
2
Jul
2026
Aug
2026

Infrastructure

leak site
ONLINE

auth gate

http://6t5g73fbzdjuhvvovuvuhc4mdgefrwn75szssx4ftqzxyuacdij47pad.onion

6684ms

1d ago

leak site
ONLINE
http://ejzl7cjxmkx7lzhiqwidmrwtfjv45pkczbc4fnyaut3t7gll3yaiq5id.onion

1207ms

5h ago

auto-discovered
ONLINE
http://ucfhnoihzgx4wz4beyzfxnh46cs37r4zbq627xyctykpatruvmghbyqd.onion

1743ms

5h ago