Threat actor
BlackLock
Tracked by CyberSIXT since 22 Sep 2025
- Articles · all time
- 2
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 4
Names and sources
- BlackLock
- Named by CyberSIXT coverage
- BlackLock
- Named by Malpedia · blacklock
- BlackLocks
- Named by Malpedia · blacklock
- El Dorado
- Named by Malpedia · blacklock
- GLOBAL GROUP
- Named by Malpedia · blacklock
- Mamona
- Named by Malpedia · blacklock
- BlackLock
- Named by MISP Galaxy · eb8fb25d-ba4f-4970-ae8a-b0020b2b9841
- BlackLocks
- Named by MISP Galaxy · eb8fb25d-ba4f-4970-ae8a-b0020b2b9841
All 12 names
- El Dorado
- Named by MISP Galaxy · eb8fb25d-ba4f-4970-ae8a-b0020b2b9841
- GLOBAL GROUP
- Named by MISP Galaxy · eb8fb25d-ba4f-4970-ae8a-b0020b2b9841
- Mamona
- Named by MISP Galaxy · eb8fb25d-ba4f-4970-ae8a-b0020b2b9841
- eb8fb25d-ba4f-4970-ae8a-b0020b2b9841
- Named by CyberSIXT coverage
- BlackLock Ransomware Targets Windows, Linux, and VMware ESXi SystemsGBHackers
- BlackLock Ransomware: A New Cross-Platform Threat Spreading RapidlySecurityOnline · first in our coverage
Research reports
- From Payment Plan to Ransomware - Inside a Global Group AttackOrkl.eu · 6 Oct
- Resecurity | Blacklock Ransomware: A Late Holiday Gift with Intrusion into the Threat Actor's InfrastructureOrkl.eu · 6 Oct
- Threat Spotlight: Inside the World’s Fastest Rising Ransomware Operator — BlackLockOrkl.eu · 6 Oct
- From El Dorado to BlackLock: Inside a Fast-Rising RaaS ThreatOrkl.eu · 6 Oct