← Back to all threat actors

blackshrantac

BlackShrantac is a ransomware group that emerged in late 2025, targeting organizations in manufacturing, financial services, technology, and the public sector globally, employing double-extortion combined with living-off-the-land techniques to weaponize legitimate tools and disable defenses before encrypting files.

How we source and review actor profiles
Motivation
ransomware
Last seen
2026-01-16
Sectors
manufacturing, technology, financial-services, government-defense, retail-e-commerce, professional-services, energy-utilities, healthcare, other, agriculture-and-food-production
Status
Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Claimed
Victim claimPKT QS listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator3 indicators cataloged

Types: onion.

First listed
Victim claimNational Water Authority listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimSCHNEIDER PROTOTYPING INDIA PVT. LTD listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimAgrícola Cerro Prieto listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimSCHNEIDER PROTOTYPING INDIA PVT LTD listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimNetstar Australia PTY Ltd listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimdemilac, Inc listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimVFM Systems & Services (P) Ltd listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimRasen Insaat Ve Yatirim Ticaret A.S. listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimBadan Pengelola Keuangan Haji listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimHexaCream Dental Laboratory listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimlibertyshoes, Inc listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimNewgen Digitalwork listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimMultistateTax Inc listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimCarvimsa listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimsimsekas, Inc listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimM&BM, Inc listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimSuperintendencia Nacional de Fiscalización Laboral listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimCCI Tax Pros, Inc listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimThe Matlusky Firm LLC listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimCyPark Resources Berhad listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimTENAX Law Group PC listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimApleNet Co., Ltd listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimEligibility Tracking Calculators listed by blackshrantac

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

The interactive view includes 43 dated events with category filters and paging.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

blackshrantacCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...