The BlackLock ransomware group is poised to become one of the most prolific RaaS operators in 2025. The group cropped up in early 2024 and is known for their unusually active presence and good reputation on the ransomware-focused Russian-language forum RAMP, and their aggressive recruiting of traffers, initial access brokers, and affiliates. Its ransomware uses custom-built ransomware that can evade analysis. The group employs significant techniques to prevent analysis.
International law enforcement agencies have seized the dark web leak site of the 8Base ransomware gang. The takedown is a significant success in disrupting ransomware operations and potentially preventing future attacks. This operation highlights the importance of international collaboration in combating cybercrime. This event is important as it demonstrates a direct action to combat cyber crime and ransomware in particular.