black x
ransomware group · aka BlackX, Black X · unknown (no public attribution or claimed nationality; victim geography spans multiple regions) · active since 2026-06-12 (first leak-site post tracked on this dashboard); any earlier activity unknown
Victims · 7d
0flat
Victims · 30d
3active targets
Victims · 90d
7
All-time (tracked)
14since 2026-06-02
Last post
09-01 04:41UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
BlackX is a low-volume ransomware and data-extortion operation identified through its Tor-based leak site, which this dashboard began tracking on 2026-06-12 and which has posted nine victims to date, most recently on 2026-09-01. Its victim list spans Asia-Pacific — including Vietnam, South Korea and Malaysia — as well as Germany and South Africa, ranging from hospitals and smaller firms to a consumer-finance lender and a national political party. Public reporting on the group is sparse: no law-enforcement advisories, vendor technical teardowns, or confirmed affiliate lineage have been widely reported, so its origin, tooling and affiliate model remain unknown. No specific vulnerabilities have been publicly attributed to the group. No ransom demands or payments have been publicly reported, leaving its earnings unknown.
Tactics & tooling
- Runs a Tor leak site naming victims and threatening publication of stolen data as extortion leverage
- Uses the leak-site extortion model typical of double-extortion campaigns; whether encryption occurs in every incident is unknown
- Lists some victims as 'Private', indicating negotiated or non-public extortion attempts
- Multi-region targeting: Vietnam, South Korea, Malaysia, Germany and South Africa observed in tracked posts
- Low, irregular posting cadence (single-digit victims per quarter), suggesting selective targeting or limited capacity
- Initial access vector, deployment tooling and infrastructure: unknown (no public technical reporting)
Targeted sectors
financial serviceshealthcaremanufacturingenergy/utilitiesgovernment/political organizationsgaming/entertainment
Notable public victims
FE Credit (Vietnam; consumer-finance subsidiary of VPBank), African National Congress (South Africa), Daechang Solution (South Korea), iwin (Vietnam), Tong Kong E & E Sdn Bhd (Malaysia), Elektroverband Bayern (Germany), Sanaa hospital (listed multiple times, incl. 'sanaa' and 'sanaa.center')
Estimated earnings
No public figure.
Leak-site victims14 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| iwin | · 14d ago | This company is a manufacturer of car parts. We have obtained all of your company's technical data. (1TByte) If you do not contact us, all your data, including technical, sales, drawings, quality, logistics, and supply chain information, will be leaked. |
| FE CREDIT | · 18d ago | We have obtained the personal information of your company's millions of customers. If the reverse clock is terminated, customer information will be leaked from our site. Please contact us to prevent customer information leakage. |
| i-one | · 18d ago | We have obtained all of your company's technical data. If you do not contact us, the data will be leaked. |
| Tong Kong E & E Sdn Bhd (95907X) | · Jul 29, 2026 | It contains sensitive data, including customers and banking records. |
| sanaa hospital | · Jul 22, 2026 | — |
| sanaa | · Jul 16, 2026 | — |
| sanaa.center | · Jul 15, 2026 | Sanaa Center for Strategic Studies (sanaa.center) is an independent research organization focused on Yemen and the surrounding Middle East, particularly politics, conflict, economics, governance, and regional security. |
| Daechang Solution | · Jun 12, 2026 | We possess all the core technical data of Daechang Solution. (Technical Research Institute, Valve Team, Cryogenic Team, Innovation Team, Sales Team, Finance Team, Materials Team, Quality Team, General Affairs Team, Production Team) we will sell it to only one. |
| Private(chat...) | · Jun 12, 2026 | — |
| Private | · Jun 8, 2026 | — |
| elektroverband-bayern | · Jun 2, 2026 | The State Guild Association for the Bavarian Electrical Trades is the umbrella organization of 25 Bavarian electrical guilds. It represents the interests of approximately 3,000 craft businesses from the following electrical trades: Electrical engineering trade Information technology trade Electrical machine manufacturing trade The State Guild Association offers its members comprehensive information services in the fields of business administration, technology, law, and management. It focuses on initial and continuing training, promotes the exchange of experience through regular specialist conferences and workshops as well as participation in trade fairs, conducts consistent public relations work, is responsible for negotiating collective bargaining agreements, and supports its member companies in implementing family-friendly personnel policies. Furthermore, the State Guild Association advocates for the interests of its members at the state and federal levels in a variety of ways and develops concepts for joint market activities together with industry, wholesalers, and electricity suppliers. The guiding principles of the Bavarian State Guild Association The member companies of the Bavarian State Guild Association for the Electrical Trades have adopted the following mission statement. The mission statement of the Bavarian electrical trades serves as Guidance and decision-making support for each individual member company Guidelines for the guilds and the state guild association in representing the interests of member companies Policy paper for the dissemination of information to the public The Bavarian electrical trade, with approximately 3,000 companies, around 87,300 employees, and roughly €15 billion in revenue, provides comprehensive information, planning, manufacturing, sales, installation, and maintenance of electrotechnical and electronic devices, systems, and equipment throughout the region. The three electrical trades (electrical engineer, information… |
| African National Congress | · Jun 2, 2026 | The ANC is a national liberation movement. It was formed in 1912 to unite the African people and spearhead the struggle for fundamental political, social and economic change. For ten decades the ANC has led the struggle against racism and oppression, organising mass resistance, mobilising the international community and taking up the armed struggle against apartheid. The ANC achieved a decisive democratic breakthrough in the 1994 elections, where it was given a firm mandate to negotiate a new democratic Constitution for South Africa. The new Constitution was adopted in 1996. The ANC was re-elected in 1999 to national and provincial government with an increased mandate. The policies of the ANC are determined by its membership and its leadership is accountable to the membership. Membership of the ANC is open to all South Africans above the age of 18 years, irrespective of race, colour and creed, who accept its principles, policies and programmes. |
| case.law | · Jun 2, 2026 | Since incorporation in 1972, CRS has delivered services to a diverse group of clients, primarily in the corrections and detention fields, at the local, regional, state, and national levels. We stole passport data from over 300 customers at CRS. |
| Wonjin Plastic Surgery | · Jun 2, 2026 | WJ Wonjin's medical staff work to achieve the optimal effect according to each individual patient's condition and desired result. Our medical services are provided by specialist doctors on-site, and our interpreting coordinators assist throughout the whole process. Safest Anesthesia System by Exclusive Anesthesiologists. We value our patients' safety during their surgery using cutting edge anesthesia system. Fully equipped with specialized medical facilities and system from the very beginning, we value safety for our patients. |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .