Ransomware group
Blackbyte ransomware: victims and leak site activity
The Blackbyte ransomware group has listed 110 victims on its leak site since February 2022; its latest post is from 30 July 2025. Most affected countries: United States, Brazil and United Kingdom. Most targeted sector: Manufacturing.
Total posts
110
First seen
2022-02-05
Latest post
2025-07-30
Countries hit
24
About Blackbyte
Ransomware. Uses dropper written in JavaScript to deploy a .NET payload.
Most targeted countries
- United States 14
- Brazil 4
- United Kingdom 3
- Poland 2
- Sweden 2
- Argentina 1
- Australia 1
- Bahrain 1
- Canada 1
- Chile 1
Most targeted sectors
- Manufacturing 21
- Professional Services 19
- Retail & E-Commerce 12
- Government & Defense 9
- Technology 9
- Agriculture and Food Production 8
- Transportation 6
- Education 5
- Energy & Utilities 5
- Financial Services 5