From El Dorado to BlackLock: Inside a Fast-Rising RaaS Threat

BlackLock is a relatively new ransomware group that is believed to have been established around March 2024. Their existence was publicly revealed in June 2024 when the Dedicated Leak Site (DLS) was identified. At that time, information on multiple affected companies had already been posted, suggesting that the gang had been active in secret for several months. The group initially operated under the name El Dorado and rebranded to BlackLock around September 2024. This post provides a summary of AhnLab SEcurity intelligence Center (ASEC) report that analyzes the characteristics, encryption methods, and technologies used by…