BlackByte Ransomware (a6a74c8f-320c-5102-ab17-9055bfb8359f)
BlackByte Ransomware is uniquely associated with BlackByte operations. BlackByte Ransomware used a common key for infections, allowing for the creation of a universal decryptor.[Trustwave BlackByte 2021][FBI BlackByte 2022] BlackByte Ransomware was replaced in BlackByte operations by BlackByte 2.0 Ransomware by 2023.[Microsoft BlackByte 2023][Cisco BlackByte 2024]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| BlackByte (94f5c644-d36a-59b0-b7e2-7a1d3413443d) | Tidal Groups | BlackByte Ransomware (a6a74c8f-320c-5102-ab17-9055bfb8359f) | Tidal Software | 1 |