Blackwater
| Active
Blackwater is a ransomware group that first surfaced in early 2026, combining file encryption with data theft and targeting healthcare organizations, with known victims including Minidoka Memorial Hospital in Idaho.
Victims
9
First Discovered
2026-05-02
victim
Last Discovered
2026-07-25
victim
Inactive Since
12
days
Avg Delay
15.6
days
Infostealer
62.5%
victims with domain
Countries
4
hit
Attack Velocity — Last 12 months
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Blog | Yes | 2026-08-06T16:15:45 | nginx |
ejzl7cjxmkx7lzhiqwidmrwtfjv45pkczbc4fnyaut3t7gll3yaiq5id.onion
|
Target
Top 5 Activity Sectors
- Healthcare 2
- Manufacturing 2
- Energy & Utilities 1
- Hospitality 1
- Professional Services 1
Top 5 Countries
-
China
3
-
Brazil
2
-
United States
2
-
Türkiye
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (9)
customers' personal data, contract information, internal company data:
http://[REDACTED].onion/s/7f…
Shenzhen Gongjin Electronics, founded in 1998 and also known as T&W, is a telecommunications manufac…
Compass Housing Alliance is dedicated to developing and providing essential services, shelter, and a…
Founded in 1983 and headquartered in Ningbo, China, Ningbo Tuopu Group Co., Ltd. is a multipurpose e…