Back to Threat Groups

blackwater

ransomware group

Blackwater is a ransomware group that first surfaced in early 2026, combining file encryption with data theft and target

Victims
10
records
First Discovered
Apr 12, 2026
victim
Last Discovered
Jul 25, 2026
victim
Inactive Since
76
days
Countries
4
hit
Avg Discount
β€”
no settlements

Group Activity

Last 12 months
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
6
Apr
2026
2
May
2026
Jun
2026
2
Jul
2026
Aug
2026
Sep
2026
Oct
2026

Infrastructure

leak site
ONLINE
http://ejzl7cjxmkx7lzhiqwidmrwtfjv45pkczbc4fnyaut3t7gll3yaiq5id.onion

2938ms

17h ago

leak site
OFFLINE

unreachable

http://6t5g73fbzdjuhvvovuvuhc4mdgefrwn75szssx4ftqzxyuacdij47pad.onion

8140ms

5d ago