🏹 blackshrantac — Ransomware
BlackShrantac is a ransomware group that emerged in late 2025, targeting organizations in manufacturing, financial services, technology, and the public sector globally, employing double-extortion combined with living-off-the-land techniques to weaponize legitimate tools and disable defenses before encrypting files.
Classification
Ransomware
Leak-site victims
43
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (43)
| Victim | Country | Published | Domain |
|---|---|---|---|
| PKT QS | GB | 2026-01-20T14:38:43.141114+00:00 | pktqs.com |
| National Water Authority | PE | 2026-01-08T02:51:23.615609+00:00 | ana.gob.pe |
| SCHNEIDER PROTOTYPING INDIA PVT. LTD | IN | 2026-01-08T02:50:57.893995+00:00 | si-smart.net |
| Agrícola Cerro Prieto | PE | 2025-12-23T17:41:33.666600+00:00 | agricolacerroprieto.pe |
| SCHNEIDER PROTOTYPING INDIA PVT LTD | IN | 2026-01-20T14:38:59.761507+00:00 | si-smart.net |
| Netstar Australia PTY Ltd | AU | 2025-12-17T16:49:04.660373+00:00 | netstar.com.au |
| demilac, Inc | TR | 2025-12-15T16:19:10.199841+00:00 | demilac.com.tr |
| VFM Systems & Services (P) Ltd | IN | 2025-12-14T20:08:14.843150+00:00 | vfmsystems.com |
| Rasen Insaat Ve Yatirim Ticaret A.S. | TR | 2025-11-29T16:16:40.980558+00:00 | rasen.com.tr |
| Badan Pengelola Keuangan Haji | ID | 2025-11-29T16:16:10.603278+00:00 | bpkh.go.id |
| HexaCream Dental Laboratory | TH | 2026-01-20T14:39:21.553784+00:00 | hexadentallab.com |
| libertyshoes, Inc | IN | 2025-11-13T01:46:20.299251+00:00 | libertyfootfashion.com |
| Newgen Digitalwork | IN | 2025-11-13T01:45:56.234082+00:00 | newgen.co |
| MultistateTax Inc | US | 2025-11-13T01:45:23.964135+00:00 | multistatetax.net |
| Carvimsa | PE | 2025-11-13T01:44:54.410750+00:00 | carvimsa.com.pe |
| simsekas, Inc | TR | 2025-11-13T01:44:20.434591+00:00 | simsekas.com.tr |
| M&BM, Inc | BG | 2025-11-13T01:43:46.225262+00:00 | mdm-bg.com |
| Superintendencia Nacional de Fiscalización Laboral | PE | 2025-11-21T09:12:23.473473+00:00 | sunafil.gob.pe |
| CCI Tax Pros, Inc | US | 2025-10-31T08:15:07.540363+00:00 | www.ccitaxpros.com |
| The Matlusky Firm LLC | US | 2025-10-31T02:15:45.677411+00:00 | matluskylaw.com |
| CyPark Resources Berhad | MY | 2025-10-31T01:21:47.472157+00:00 | cypark.com |
| TENAX Law Group PC | US | 2025-10-31T01:21:18.578170+00:00 | tenaxlawgroup.com |
| ApleNet Co., Ltd | KR | 2025-10-30T03:19:19.998979+00:00 | aplenet.co.kr |
| Eligibility Tracking Calculators | US | 2025-10-28T21:14:52.211780+00:00 | ettc.com |
| Computer World W.L.L | QA | 2025-10-20T16:19:18.525165+00:00 | cwbah.com |
| Cabinets 2000, LLC | US | 2025-10-20T14:50:59.271734+00:00 | cabinets2000.com |
| Al Ahly Leasing & Factoring Company | EG | 2025-10-20T14:50:27.070412+00:00 | alc.com.eg |
| ETC Companies | US | 2026-01-20T14:39:45.006053+00:00 | etcbuild.com |
| SK shieldus | KR | 2025-10-17T03:21:23.415274+00:00 | skshieldus.com |
| Gulf Warranties LLC | AE | 2025-10-16T02:48:58.888275+00:00 | gulfwarranties.com |
| Cabinets 2000 Inc | US | 2026-01-20T14:40:04.284101+00:00 | cabinets2000.com |
| Altas Temizlik | TR | 2025-10-13T10:13:41.067676+00:00 | altastemizlik.com |
| Falco Electronics | MX | 2025-10-10T03:40:36.562718+00:00 | falco.com, falcoprc.com, support.falcomex.com, falcosales.com, crspower.com, citrix11.falcomex.com, citrix11.falcoprc.com, citrix11.kaypeeindia.com |
| Standard Fiber | US | 2025-10-04T16:39:14.392148+00:00 | standardfiber.com |
| S*** F***.com | 2025-10-02T21:18:59.168849+00:00 | — | |
| Sta***** Fib**.com | 2025-09-26T19:21:28.634504+00:00 | — | |
| Ak** Me*** | 2025-09-26T09:38:30.580762+00:00 | — | |
| General Directorate of Taxes and Estates | SN | 2025-09-29T12:13:36.555736+00:00 | dgid.sn |
| Altaş | TR | 2025-09-20T16:45:36.581133+00:00 | altas.com.tr |
| Klinglnberg india pvt ltd | IN | 2025-09-20T16:45:08.870878+00:00 | klinglnberg.in |
| klingLnberg.in | IN | 2025-09-18T01:41:00.251594+00:00 | klingLnberg.in |
| kli******erg.in | IN | 2025-09-17T06:06:49.259330+00:00 | — |
| alt******.tr | TR | 2025-09-17T06:05:54.947693+00:00 | — |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron