BlackShrantac is a ransomware group that emerged in late 2025, targeting organizations in manufacturing, financial services, technology, and the public sector globally, employing double-extortion combined with living-off-the-land techniques to weaponize legitimate tools and disable defenses before encrypting files.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
blackshrantac ransomware
*/
rule blackshrantac_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.blackshrantac"
description = "Detects blackshrantac ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "blackshrantac" ascii nocase
$name2 = "BLACKSHRANTAC" ascii
$onion = "blackshrantac.onion" ascii nocase
condition:
any of them
}
[AI generated] N/A
[AI generated] Agrícola Cerro Prieto is a Peruvian agricultural company, focused on the cultivation and exporting of a wide assortment of crops. Located in Chao, La Libertad, Peru, the enterprise is known for its cultivation of grapes, avocados, and asparagus among other products. Agrícola Cerro Prieto utilizes sophisticated irrigation systems and other technology to produce high-quality yields.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| National Water Authority | PE | Public Sector | — | 8 ene 2026 |
| Agrícola Cerro Prieto | PE | Agriculture and Food Production | — | 23 dic 2025 |
| Superintendencia Nacional de Fiscalización Laboral | PE | Public Sector | — | 21 nov 2025 |
| Carvimsa | PE | Manufacturing | — | 13 nov 2025 |
| Falco Electronics | MX | Technology | — | 10 oct 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
[AI generated] The "Superintendencia Nacional de Fiscalización Laboral" (SUNAFIL) is a Peruvian government agency responsible for promoting, supervising and enforcing labor rights. They assure compliance with labor and occupational health and safety standards. They also promote culture of formal employment through the provision of information to workers and employers, aiming to improve working conditions in Peru.
[AI generated] "Carvimsa" or Corporacion Azucarera del Peru is a Peruvian company involved in the agro-industrial sector, specifically specializing in the production and commercialization of sugar, molasses, and alcohol. Their products are primarily for domestic consumption but they also export to other countries. The company's operations are integrated with farming, industrial, and commercial activities.
[AI generated] Falco Electronics is a company that specializes in electronic components and manufacturing. This company is noted for its dedication to quality and efficiency, producing a range of electronic parts including resistors, capacitors, diodes, and more. Founded in 1991, Falco Electronics has vast experience within the electronics industry. It operates a manufacturing and distribution network that spans North and South America.