Blackshadow
Ransomware Group Profile
Overview
BlackShadow is an Iranian-linked hack-and-leak group (linked to the Agrius APT) that targeted Israeli companies including insurance firm Shirbit and hosting provider Cyberserve, leaking medical records of 290,000 patients, using extortion as a tool of geopolitical disruption rather than purely for financial gain.
Dark Web Infrastructure (2)
544corkfh5hwhtn4.onion
blackshadow.cc
Activity Timeline
First Seen2021
Last Seen2022
Leak Sites2
Quick Actions