What is BlackCat Ransomware?

BlackCat Ransomware, also known as ALPHV, is a ransomware gang that first emerged in late 2021. The group operates under a RaaS model and utilizes a double extortion tactic. To gain initial access to a network, the hackers rely on stolen credentials obtained through access brokers. BlackCat has been linked to both DarkSide ransomware and BlackMatter ransomware suggesting that BlackCat is the successor or rebranding of both. BlackCat gained notoriety over the years by successfully extorting over 1,000 victims including Reddit, Moncler, Florida Int. University, Bandai Namco, and many more. 

Read more about this ransomware variant HERE.

$5 to $10 Million Reward for BlackCat Ransom Gang

December 19, 2023, the Justice Department disrupted BlackCat operations, seized multiple ALPHV/BlackCat sites, and released a decryption tool for victims to use freely. This tool enabled over 500 victims in restoring their computer systems, sparing them from ransom demands amounting to approximately $99 million.

As of February 15, 2024, the US Department of State is offering a $5 million reward for information on associates involved in BlackCat attacks that leads to their arrest or conviction. Furthermore, a $10 million reward is being offered for any leads on BlackCat leaders that result in their arrest or conviction. This reward announcement aligns seamlessly with the FBI’s announcement of collaboration with law enforcement groups in Germany, Denmark, Australia, Spain, and the UK. This reward is provided through the Department of State’s Transnational Organized Crime Rewards Program (TOCRP), aimed at bolstering global law enforcement endeavors to dismantle transnational crime and apprehend fugitives.

In more recent news, BlackCat was identified as the perpetrator behind an attack on Change Healthcare, a subsidiary technology unit of UnitedHealth on February 21, 2024.

Click HERE to learn more about Ransomware Prevention! We are available 24×7 to assist you with any of your ransomware needs.

Latest Ransomware Related Blogs

Securing data backups against ransomware. The image depicts a cybersecurity theme with a focus on data protection. In the foreground, hands are typing on a laptop keyboard, symbolizing user interaction with technology. Floating above the laptop is a large, glowing white padlock icon, representing secure access or cybersecurity. To the left of the padlock are three smaller icons: a cloud with arrows (representing cloud storage or data transfer), a shield with a checkmark (indicating security or protection), and a globe with an envelope (symbolizing global communication or email security). On the right side of the padlock is a semi-transparent login interface displaying "CYBER SECURITY" with placeholders for a username and password, emphasizing secure user authentication. The background is softly blurred, focusing attention on the icons and laptop interaction. The overall tone conveys the importance of cybersecurity in a connected digital environment.
Incident Response Readiness. The image shows a man sitting at a desk, visibly stressed, with his hands on his head. He is staring at two computer monitors displaying warning messages that read "SYSTEM HACKED," suggesting that his computer system has been compromised. The room appears to be an office setting, with a light background and organized desk supplies. The man seems overwhelmed, likely due to the cyberattack that has disrupted his work.
Canva image. The image shows a close-up of a document labeled "Impact Analysis" with the phrase "Work products to be modified" underneath. A sharpened pencil is positioned diagonally on the document, emphasizing the text. The image suggests an analysis or evaluation process, with the pencil symbolizing planning or marking important points. The context appears to involve reviewing or modifying work processes or products based on the impact analysis findings.
Mitigating DoppelPaymer ransomware effects. The image depicts a person typing on a keyboard, with a digital overlay of cybersecurity elements. There is a semi-transparent shield icon with a padlock in the center, symbolizing security, and other icons related to data protection and technology around it. On the right side, there’s a digital login form interface, showing fields for a username and password. The overall theme of the image appears to be related to cybersecurity and secure online access. The person in the image is wearing a blue shirt, though their face is not visible.
Ransomware Rescue
Contact Alvaka