BlackLock, a ransomware group formerly known as Eldorado, is known for double extortion tactics.
BlackLock is a rebranded ransomware group formerly known as Eldorado. It primarily targets technology, manufacturing, construction, finance, and retail sectors. Its main TTPs include file encryption, data exfiltration, and double extortion tactics. Defenders should focus on maintaining secure offline backups, enforcing multi-factor authentication, and implementing network segmentation.
BlackLock is a rebranded version of another ransomware group known as Eldorado. It has since become one of the most active extortion syndicates in 2025, heavily targeting technology, manufacturing, construction, finance, and retail sectors.
The BlackLock group was formerly known as Eldorado.
BlackLock's main TTPs include file encryption, data exfiltration, and double extortion tactics.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.