Ransomware BlackShadow

The BlackShadow ransomware emerged in mid-2021, soon after emerging, it began a series of attacks and data leaks. One of the most attention-grabbing attacks was on Israel’s Machon Mor medical institute, the leak included medical records of about 290,000 patients.

The directory that was stolen and leaked includes various information, about blood tests, treatments, appointments for gynecologists, CT scans, ultrasounds, colonoscopies, vaccinations for flights abroad, and others.

The ransomware group also made a major attack on a dating site’s database by gaining access to the platform’s customer records.

BlackShadow asks for a fixed ransom of $1 million in bitcoins, and if the ransom is not paid within 48 hours, the company’s data is leaked on the group’s website.

After the data leak, the group leaves the following message: “48 hours ended! Nobody send us money. This is not the end, we have more plan.” And even after the leak, the company’s data will remain encrypted.

Remaining with encrypted files can paralyze the company’s operation causing a loss that can easily exceed the amount requested as ransom by the criminals. Given this, it may seem that the best way out is to pay the ransom, and get your data back again. This is not the best way out, there are companies that specialize in recovering data encrypted by ransomware.