BlackByte · ATT&CK software

Malware

4 software · source: MITRE ATT&CK G1043

Every mark is malware or a tool ATT&CK records this group using. A name opens it on attack.mitre.org; its chip shows who else uses it.

Connect AI

Open G1043 on attack.mitre.org

Every one of the 4 is a mark on the map. Named now: 1 to 4, by name first.

BlackByte 2.0 RansomwareS1181Malware · ATT&CK software
Actors that use it
BlackByte RansomwareS1180Malware · ATT&CK software
Actors that use it
Cobalt StrikeS0154Malware · ATT&CK software
Actors that use it
ExbyteS1179Malware · ATT&CK software
Actors that use it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.