Blackfield is a ransomware group primarily targeting the manufacturing sector in Brazil and Taiwan.
Blackfield is an active ransomware/extortion group primarily targeting the manufacturing sector in Brazil and Taiwan. The group exfiltrates victim data and threatens to publish it on their public leak site. Defenders should focus on anti-ransomware measures and data exfiltration monitoring, especially within manufacturing networks in the targeted regions.
Blackfield is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
Blackfield primarily targets the manufacturing sector, especially networks in Brazil and Taiwan.
The group exfiltrates victim data and threatens to publish it on their public leak site as part of their extortion tactics.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.