BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
blacknevas ransomware
*/
rule blacknevas_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.blacknevas"
description = "Detects blacknevas ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "blacknevas" ascii nocase
$name2 = "BLACKNEVAS" ascii
$onion = "blacknevas.onion" ascii nocase
condition:
any of them
}
A Canadian IT company based in Markham, Ontario, founded in 2015. It develops software for warehouse management and automation (Warehouse Management Systems).Key products:RF Plus — a barcode scanning and inventory tracking system for ERPs (specifically Infor VISUAL)TED — a warehouse task management and tracking platformSolutions for forklift tracking, RTLS (Real-Time Locating Systems), and machine visionIt works primarily with manufacturers in North America.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... | US | Technology | — | 13 ago 2026 |
| Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C... | US | Agriculture and Food Production | — | 12 ago 2026 |
| Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co... | US | Healthcare | — | 12 ago 2026 |
| Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT ... | CA | Professional Services | — | 12 ago 2026 |
| COMPUTER COUNTRY AND NETWORKS | Technology | — | 12 ago 2026 | |
| Speed Group | Transportation | — | 28 jul 2026 | |
| Zuni Shopping Center, Inc. | US | Retail & E-Commerce | — | 22 jul 2026 |
| L'azurde | SA | Consumer Services | — | 14 jul 2026 |
| Abans Group | LK | Consumer Services | — | 1 jul 2026 |
| Arkin Group | Business Services | — | 30 jun 2026 | |
| Abans Finserv | IN | Consumer Services | — | 29 jun 2026 |
| LATCOM | AR | Retail & E-Commerce | — | 30 oct 2025 |
| SISTRAN Consultores | MX | Technology | — | 1 sept 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
A Canadian family-owned company (part of the Westbrook Group of Companies) founded over 50 years ago. It specializes in the design, manufacturing, and installation of commercial greenhouses and related equipment (structures, heating and ventilation systems, benches, and handling materials).Its headquarters and manufacturing facilities are located in the Niagara region (Beamsville, Ontario). It serves clients across North America and operates its own factory spanning approximately 80,000 square feet.
There is very little public information available about this company. Judging by its name, it is a small supplier or manufacturer of ophthalmology products (equipment, consumables, or instruments for eye care). There is virtually no detailed data regarding its operations, location, or history in open sources.
Jack Rutherford Customs Brokers Ltd. is a Canadian customs brokerage company currently operating under the brand name The Rutherford Group. The company provides comprehensive logistics services, primarily: customs brokerage (import and export clearance, clearance through Canadian and US customs, compliance consulting, CARM, surety bonds, etc.). They have PIP (Partners in Protection) status.Transportation: shipping within Canada, the US, and internationally.Warehousing: bonded warehouses (including CBSA sufferance), pick & pack, storage, including FDA-certified warehouses in Port Huron, Michigan.The company was founded in 1974 by Jack Rutherford in Stratford, Ontario. Now a family-owned business (second generation – John Rutherford), it positions itself as a one-stop shop for cross-border logistics.
A local Canadian IT company based in Stratford, Ontario, operating since 1983. It provides services to small and medium-sized businesses as well as private clients in the Stratford–St. Marys–Mitchell region and surrounding areas. Core services:Computer and laptop repairNetwork setup and supportServer installation and maintenanceVirus removal and system optimizationPOS systems (point-of-sale equipment)On-site serviceA small local service company with over 40 years of experience.
Speed Group (speedgroupe.com / speedfrance.fr) is a global leader in the manufacture of synthetic monofilament lines. The company was founded in France over 40 years ago. Today, Speed Group operates four manufacturing plants located in France, the USA, Chile, and South Africa. It specializes in the extrusion of high-quality monofilaments—particularly trimmer lines—and ranks among the world's leading players in this sector. The company also produces technical monofilaments for other industries. Since 2004, it has been part of the Italian Emak Group (Tecomec). Speed Group is renowned for its high product quality, rigorous production controls, and excellent service.Cyber Attack on Speed Group (speedgroupe.com)World leader in monofilament lines manufacturing — Speed Group — has been hit by a cyber attack. Hackers breached the company’s systems and stole confidential data.More than 1 terabytes of information were exfiltrated, including technical documentation, customer databases and production data from factories in France, USA, Chile, and South Africa.The company has not issued an official statement yet. #SpeedGroup #CyberAttack #DataBreach