Japan

blackbyte

Ransomware. Uses dropper written in JavaScript to deploy a .NET payload.

First seen 2021-10-04 · Last seen 2025-07-30 · 1 Japan claims

Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Stealth, Credential Access, Discovery, Lateral Movement, Collection, Exfiltration, Command and Control, Impact

Cached from ransomware.live. 2026-10-01 PT. Leak sites are not linked.