A ransomware group targeting global manufacturing, financial services, and technology sectors using double-extortion tactics.
BlackShrantac is a ransomware group that emerged in late 2025, targeting manufacturing, financial services, technology, and public sector organizations globally. They employ double-extortion combined with living-off-the-land techniques to weaponize legitimate tools and disable defenses before encrypting files. Defenders should monitor for anomalous use of legitimate tools inside the network and maintain offline backups of critical data.
BlackShrantac is a ransomware group that emerged in late 2025, targeting organizations in manufacturing, financial services, technology, and the public sector globally, employing double-extortion combined with living-off-the-land techniques to weaponize legitimate tools and disable defenses before encrypting files.
BlackShrantac combines double-extortion tactics with living-off-the-land techniques to weaponize legitimate tools.
Defenders should monitor for anomalous use of legitimate tools inside the network and maintain offline backups of critical data.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.