Description
BlackSnake is a ransomware variant that encrypts files on infected Windows systems and demands payment for decryption. Its operators gain initial access through compromised remote services, disable security tooling, and steal data before encryption to strengthen their extortion pressure. Researchers documented the family's encryption routine and infection behavior.
Stats
- First seen
- March 2023
- Last seen
- October 2026
Also known as
Blacksnake
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.BlackSnake.2 |
| Win32.Ransomware.Blacksnake |
| Win32.Ransomware.BlackSnake |
