Blackwater
| Active
Blackwater is a ransomware group that first surfaced in early 2026, combining file encryption with data theft and targeting healthcare organizations, with known victims including Minidoka Memorial Hospital in Idaho.
Victims
8
First Discovered
2026-05-02
victim
Last Discovered
2026-07-10
victim
Inactive Since
3
days
Avg Delay
15.6
days
Infostealer
42.9%
victims with domain
Countries
4
hit
Attack Velocity — Last 12 months
Stable vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Blog | No | 2026-07-13T00:45:15 | nginx |
ejzl7cjxmkx7lzhiqwidmrwtfjv45pkczbc4fnyaut3t7gll3yaiq5id.onion
|
Target
Top 5 Activity Sectors
- Healthcare 2
- Manufacturing 2
- Hospitality and Tourism 1
- Business Services 1
- Public Sector 1
Top 5 Countries
-
China
3
-
United States
2
-
Türkiye
1
-
Brazil
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (8)
Shenzhen Gongjin Electronics, founded in 1998 and also known as T&W, is a telecommunications manufac…
Compass Housing Alliance is dedicated to developing and providing essential services, shelter, and a…
Founded in 1983 and headquartered in Ningbo, China, Ningbo Tuopu Group Co., Ltd. is a multipurpose e…