Black X is a ransomware/extortion group targeting manufacturing, healthcare, and professional services sectors in Yemen, Malaysia, and South Korea.
Black X is an active ransomware/extortion group that lists its victims on a public leak site. The group primarily targets the Manufacturing, Healthcare, and Professional Services sectors in Yemen, Malaysia, and South Korea. Their main TTP involves encrypting files and threatening data leaks for ransom; while specific tools or CVEs are not provided, standard ransomware operation models are expected. Defenders should focus on network segmentation, maintaining offline backups of critical data, and heightening vigilance against phishing emails especially targeting these regions.
Black X is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
The Black X group primarily targets organizations located in Yemen, Malaysia, and South Korea.
Focus on network segmentation, maintaining offline backups of critical data, and heightening vigilance against phishing emails especially targeting the mentioned regions.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.