BlackJack

Also known as: BlackJack

Blackjack, a threat actor linked to Ukraine’s security apparatus, has targeted critical Russian entities such as ISPs, utilities, and military infrastructure. They have claimed responsibility for launching cyberattacks resulting in substantial damage and data exfiltration. The group allegedly used the Fuxnet malware to target sensor gateways connected to internet-connected sensors, impacting infrastructure monitoring systems. Blackjack has also been involved in attacks against companies like Moscollector, causing disruptions and stealing sensitive data.

🌍 Country Ukraine

Introduction

Blackjack, a threat actor linked to Ukraine’s security apparatus, has targeted critical Russian entities such as ISPs, utilities, and military infrastructure. They have claimed responsibility for launching cyberattacks resulting in substantial damage and data exfiltration. The group allegedly used the Fuxnet malware to target sensor gateways connected to internet-connected sensors, impacting infrastructure monitoring systems. Blackjack has also been involved in attacks against companies like Moscollector, causing disruptions and stealing sensitive data.

Activities and Tactics

Country of Origin: 🇺🇦 Ukraine

Notable Campaigns

Information pending cataloguing.

Tactics, Techniques, and Procedures (TTPs)

Information pending cataloguing.

Notable Indicators of Compromise (IOCs)

No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.

Malware and Tools

  • BlackEnergy
  • BLACKCOFFEE
  • Blackshades
  • BlackNix
  • CyberGate
  • Cyber Eye RAT
  • BlackHole

Attribution and Evidence

Country of Origin: Ukraine Additional attribution information pending cataloguing.

References

References pending cataloguing.