Black Nevas Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.
ransomware 59 leak-site claims, all timeLatest observed leak-site post 2026-10-15
aka blacknevas
Names and spellings merged by the site editor: black-nevas, blacknevas.
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
Executive facts
Actor Black Nevas
Kind ransomware
Aliases blacknevas
Actor record created 2026-07-14
Latest observed 2026-10-15
Leak-site claims 59
Catalogued techniques 0 Scope
Tracked sectors Manufacturing, Retail, Technology, Healthcare, Education
Claim records 2025-08-06 to 2026-10-15 Vulnerability events linked to this group No dated vulnerability events are attached to this group's linked vulnerabilities.
Verified techniques No verified ATT&CK mapping for this group.
Defensive actions No defensive actions are attached to this profile.
Most-claimed sectors Manufacturing Retail Technology Healthcare Education
Activity window in this site's data
This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.
Claim records First observed 2025-08-06 Latest observed 2026-10-15 Claims posted under this group's name or leak-site brand 59 Verified ATT&CK phases represented
No verified ATT&CK mapping for this group
Origin and motivation
Origin and motivation not attributed.
No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.
Claims posted under this group's name or leak-site brand
59 on this site Amity University Dubai Education 2026-10-15 source ↗ Optimum First Mortgage (Pear's acting group's promotional blog) Financial Services 2026-09-16 source ↗ PROMOSFERA S.r.l. Business & Professional Services 2026-09-09 source ↗ Cash and carry - COSAEN GRUP Manufacturing 2026-09-09 source ↗ Abans Group Financial Services 2026-09-09 source ↗ Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach Hospitality 2026-09-09 source ↗ L'azurde Retail 2026-09-09 source ↗ Speed Group Manufacturing 2026-09-09 source ↗ OTEGROUP Automotive 2026-09-09 source ↗ ASCOM S.p.A. ascom-italy.it serviced by an IT company Emilcom S.r.l. www.emilcom.it Manufacturing 2026-09-09 source ↗ View all on Breaches → Leak-site claim activity
Claims per month, 2025-08 to 2026-10. Peak 16 in 2025-08.
16 4 5 0 0 1 0 7 2 0 0 3 5 15 1
2025-08 2026-10
Show monthly counts as a table 0 additional claims without a disclosure date
Ransomware claim data is unverified: RansomLook (CC BY 4.0) and ransomware.live (Terms of use: credit and link required).