Captured Sep 27, 2026

blacknevas

Active

25 tracked victims · First seen Apr 24, 2023 · Last seen Sep 16, 2026

About

Aggregated threat-intel description

BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.

Sectors: Technology, Manufacturing, Consumer Services · Countries: US, TR, ES

Recent victims

View all →

Victim	Sector	Country	Data	Posted	Status
Optimum First Mortgage (Pear's acting group's promotional blog)	Brokerage		9.3TB	Sep 16, 2026	listed
Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco...	Manufacturing	TR	—	Sep 8, 2026
ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l.	Manufacturing	Italy	—	Aug 14, 2026
Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer...	Information Technology	US	—	Aug 13, 2026
Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C...	Design	Canada	—	Aug 12, 2026
Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co...	Healthcare	US	—	Aug 12, 2026
Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT ...	Customs brokerage	Canada	—	Aug 12, 2026
COMPUTER COUNTRY AND NETWORKS	Technology		—	Aug 12, 2026
OTEGROUP	Automotive	OM	307,97 GB	Aug 7, 2026
Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach	Casinos	TR	—	Aug 4, 2026	listed
Speed Group	Manufacturing		more than 1 terabytes	Jul 28, 2026	listed
Zuni Shopping Center, Inc.	Retail & E-Commerce	US	—	Jul 22, 2026
Arkın Group	Casinos	TR	—	Jul 14, 2026
L'azurde	Jewelry & Watch Retail	Saudi Arabia	—	Jul 14, 2026
Abans Group	Consumer Services	LK	—	Jul 1, 2026
Arkin Group	Education	Northern Cyprus	—	Jun 30, 2026
Abans Finserv	Consumer Services	IN	—	Jun 29, 2026
LATCOM	Not Found	AR	—	Oct 30, 2025
Yateem Group	Not Found	BH	—	Oct 29, 2025
Trojan Construction & Holding Group	Construction		—	Oct 27, 2025
Undefasa	Manufacturing	ES	—	Oct 13, 2025
T. Choithram And Sons, LLC	Consumer Services	US	—	Oct 7, 2025
Caresoft Global caresoftglobal.com	Technology	US	—	Sep 29, 2025
CARTONAJES BERNABEU SAU www.cartonajesbernabeu.com serviced by IT company Verne Group www....	Manufacturing	ES	—	Sep 11, 2025
OftalTech Solutions oftaltech.com	Technology	US	—	Sep 6, 2025

Found by ThreatCluster

1 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

DLS

Aug 29, 2026

All ransomware groups · Dark web intelligence