BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
blacknevas ransomware
*/
rule blacknevas_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.blacknevas"
description = "Detects blacknevas ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "blacknevas" ascii nocase
$name2 = "BLACKNEVAS" ascii
$onion = "blacknevas.onion" ascii nocase
condition:
any of them
}
Industry: Finance Lending & BrokerageLocation: USA Data Volume: 9.3TBData Description: Financials, HR, Clients’ Private Data & Financial Details, PII & PHI Records, Mailboxes & Email Correspondence, Database Exports, OneDrive StoredDownload:Link [enlace omitido]/optimumfirst.comLink [enlace omitido]/optimumfirst.comOptimum First Mortgage provides mortgage solutions, including:Home purchase loansRefinancing optionsThey operate as a wholesale lender in the United States, helping clients secure home loans and restructure their debts. The company specializes in real estate financial services.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Optimum First Mortgage (Pear's acting group's promotional blog) | Financial Services | — | 16 sept 2026 | |
| Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... | US | Technology | — | 13 ago 2026 |
| Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C... | US | Agriculture and Food Production | — | 12 ago 2026 |
| Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co... | US | Healthcare | — | 12 ago 2026 |
| Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT ... | CA | Professional Services | — | 12 ago 2026 |
| COMPUTER COUNTRY AND NETWORKS | Technology | — | 12 ago 2026 | |
| Speed Group | Transportation | — | 28 jul 2026 | |
| Zuni Shopping Center, Inc. | US | Retail & E-Commerce | — | 22 jul 2026 |
| L'azurde | SA | Consumer Services | — | 14 jul 2026 |
| Abans Group | LK | Consumer Services | — | 1 jul 2026 |
| Arkin Group | Business Services | — | 30 jun 2026 | |
| Abans Finserv | IN | Consumer Services | — | 29 jun 2026 |
| LATCOM | AR | Retail & E-Commerce | — | 30 oct 2025 |
| SISTRAN Consultores | MX | Technology | — | 1 sept 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
A Canadian IT company based in Markham, Ontario, founded in 2015. It develops software for warehouse management and automation (Warehouse Management Systems).Key products:RF Plus — a barcode scanning and inventory tracking system for ERPs (specifically Infor VISUAL)TED — a warehouse task management and tracking platformSolutions for forklift tracking, RTLS (Real-Time Locating Systems), and machine visionIt works primarily with manufacturers in North America.
A Canadian family-owned company (part of the Westbrook Group of Companies) founded over 50 years ago. It specializes in the design, manufacturing, and installation of commercial greenhouses and related equipment (structures, heating and ventilation systems, benches, and handling materials).Its headquarters and manufacturing facilities are located in the Niagara region (Beamsville, Ontario). It serves clients across North America and operates its own factory spanning approximately 80,000 square feet.
There is very little public information available about this company. Judging by its name, it is a small supplier or manufacturer of ophthalmology products (equipment, consumables, or instruments for eye care). There is virtually no detailed data regarding its operations, location, or history in open sources.
Jack Rutherford Customs Brokers Ltd. is a Canadian customs brokerage company currently operating under the brand name The Rutherford Group. The company provides comprehensive logistics services, primarily: customs brokerage (import and export clearance, clearance through Canadian and US customs, compliance consulting, CARM, surety bonds, etc.). They have PIP (Partners in Protection) status.Transportation: shipping within Canada, the US, and internationally.Warehousing: bonded warehouses (including CBSA sufferance), pick & pack, storage, including FDA-certified warehouses in Port Huron, Michigan.The company was founded in 1974 by Jack Rutherford in Stratford, Ontario. Now a family-owned business (second generation – John Rutherford), it positions itself as a one-stop shop for cross-border logistics.
A local Canadian IT company based in Stratford, Ontario, operating since 1983. It provides services to small and medium-sized businesses as well as private clients in the Stratford–St. Marys–Mitchell region and surrounding areas. Core services:Computer and laptop repairNetwork setup and supportServer installation and maintenanceVirus removal and system optimizationPOS systems (point-of-sale equipment)On-site serviceA small local service company with over 40 years of experience.