BlackLock Ransomware (e56896fb-8a47-4fc8-a0e4-2a8a324da66d)
Security researchers have described BlackLock as a "rebranding" of the Eldorado ransomware operation.[Resecurity BlackLock March 25 2025] Unless otherwise noted, this object uses details from the existing "Eldorado Ransomware" Software object.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| BlackLock Ransomware Operators (fea2db0e-e6a6-44f1-9b5a-2d00744c388b) | Tidal Groups | BlackLock Ransomware (e56896fb-8a47-4fc8-a0e4-2a8a324da66d) | Tidal Software | 1 |