Black Nevas

Parsing : Enabled

Description

BlackNevas ransomware — also referred to as “Trial Recovery” — was first observed in November 2024. It is a direct derivative of the Trigona ransomware family and continues the lineage's focus on extortion over public shaming. BlackNevas operators support a double-extortion model, encrypting files using AES-256 with RSA-4112-protected keys, and appending the .-encrypted or .ENCRYPTED file extension to affected files. Hybrid payloads are available for Windows, Linux, NAS, and VMware ESXi platforms.

While BlackNevas does not host its own data leak site, it reportedly collaborates with other ransomware groups for data publication — known partners include Kill Security, Hunters International, DragonForce, Blackout, Embargo Team, and Mad Liberator. The group has predominantly targeted large enterprises in sectors such as finance, telecommunications, manufacturing, healthcare, and legal. Initial access is commonly achieved via phishing or exploitation of vulnerabilities, with lateral movement facilitated through SMB enumeration and optional LAN-wide propagation.

External Analysis
https://www.sentinelone.com/anthology/blacknevas/
https://www.hookphish.com/blog/ransomware-group-blacknevas-hits-tani-and-abe/
Mail
compsupp@techie.com
paymeuk@consultant.com
Serina5Murrock@email.com
oxicavalon@myself.com
Telegram
https://t.me/BlackNevas
Urls
Screen
http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion/
Screen
File servers
Screen
Chat servers
Screen
Admin servers
Screen

Posts

Date Title Description Screen
2025-08-07
LEARN is a Regional Educational Service Center www.learn.k12.ct.us LEARN is a Regional Educational Service Center working with and for its member districts to improve the quality of public education for all learners
2025-08-07
Cash and carry - COSAEN GRUP www.cosaen.es Cash and carry - COSAEN GRUPProfessionals in the food sectorŃŽCosaen Grup SA has wholesale and retail warehouses offering a wide range of food and beverage products, as well as fresh and dry goods.https://www.zoominfo.com/c/cosaen-grup-sa/459229657In stock: 983158 filedata size: 243GBList of files, to confirm that we have all the files, you can request several files from the list and we will provide them to you.https://gofile.io/d/9w9WwWe ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab.Advertising:We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients.
2025-08-07
Dragonfly CO. LTD dragonflygame.com Dragonfly is a South Korean video game developer and publisher based in Seoul. While a small company, it is notable for releasing many popular games both in Korea and globally including Special Force and Karma and still continue to release games both domestically and abroad. Besides video games, the company has also branched into other industries including biotechnology and webtoon publishing.
2025-08-06
TANI & ABE www.taniabe.co.jp TANI & ABE is a patent and trademark law firm established in 1977 and headquartered in Tokyo, Japan. Revenue: 5000000 Category: Law Firms & Legal Services In Stock: 0 files Data Size: Last Updated: 7/27/2025, 1:44:51 PM
Screen
2025-08-06
CK Power Public Company Limited www.ckpower.co.th CK Power Public Company Limited, through its subsidiaries, generates and sells electricity and steam in Thailand and Lao People's Democratic Republic. Revenue: 274000000 Category: Energy, Utilities & Waste Treatment General In Stock: 0 files Data Size: Last Updated: 7/27/2025, 1:33:57 PM
Screen
2025-08-06
CHABAA BANGKOK www.chabaabangkok.com Chabaa is the leading expert in fruit beverage production. 700 GB of information, product formulas, financial reports, customer data, etc. List of files, to confirm that we have all the files, you can request several files from the list and we will provide them to you. https://biteblob.com/Information/Iobho0fjfD1L9V/#chabaa.txt We ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab. Advertising: We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients. Revenue: 496000000 Category: Food Service In Stock: 0 files Data Size: Last Updated: 7/22/2025, 8:11:07 AM
Screen
2025-08-06
CILI www.cili.lt "cili.lt" is associated with ÄŚili, a restaurant chain that operates in Lithuania and Latvia. It started as a pizza restaurant and has since expanded into various areas, including bistros, traditional Lithuanian-style restaurants, Chinese restaurants, coffee shops, and drive-ins. The website allows users to order pizza from ÄŚili Pizza. Additionally, there is a mobile app available for ordering, which offers exclusive discounts. In stock, the database containing customer data, addresses, mail, mobile phones, shopping history and banking card Revenue: 25000000 Category: Grocery Retail In Stock: 0 files Data Size: Last Updated: 7/12/2025, 11:17:02 AM
Screen
2025-08-06
Dragonfly CO. LTD dragonflygame.com Dragonfly is a South Korean video game developer and publisher based in Seoul. While a small company, it is notable for releasing many popular games both in Korea and globally including Special Force and Karma and still continue to release games both domestically and abroad. Besides video games, the company has also branched into other industries including biotechnology and webtoon publishing. Revenue: 18000000 Category: Multimedia, Games and Graphics Software In Stock: 0 files Data Size: Last Updated: 7/7/2025, 7:34:16 PM
Screen
2025-08-06
Quality Data Service, Inc. www.qds.biz Today, we’re opening the auction. Over the past several weeks, we’ve completed a full exfiltration from the infrastructure of Quality Data Service, Inc., Connecticut’s most “trusted” municipal software provider. The haul: approximately 300 GB of internal company data, including: SQL databases of client municipalities, tax departments, GIS records, and user credentials Gigabytes of PDFs, XLS files, DOC reports — many containing deeply sensitive financial, geographic, and personal data with contats Internal emails, technical logs, software source code archives, vulnerability reports, and support tickets Most importantly: comprehensive information on over 200 Connecticut municipalities, their operational structures, internal correspondences, and revaluation records These aren’t just files. These are lives, towns, histories, and vulnerabilities — trusted to a company that no longer respects the responsibility it bears. Why Are We Doing This? We approached Quality Data Service, Inc. privately before publishing anything. Our intent was not destruction. But from the Founder & President, to the CFO, Director of Assessor Support,ITs and others — we received silence, evasion, or worse: denial. They knew. They were warned. They did nothing. Their refusal to act wasn’t just negligence — it was an act of contempt for every municipality they serve. It’s not just about stolen data. It’s about a culture that prioritizes profit over protection, and PR over real recovery. And when cybersecurity “experts” are called in only to recommend burning what’s left — that’s not incident response. That’s malpractice. The Auction We are now offering: Full dataset: All stolen data, intact and complete (buyout option) Per-municipality packages: Tailored datasets for each town or district eQuality source code: Core application and modules available separately Buyers of individual municipality data will receive exclusive access — upon purchase, that data will be removed from general availability. (We believe in boundaries, even if others do not.) If You're a Victim If your municipality is among the affected, you can contact us. We offer: Permanent removal of your data from our archives and auction Technical documentation proving the breach Internal evidence of the company’s failure to act, including logs and communications with their leadership Assistance in legal proceedings to seek compensation from Quality Data Service, Inc. Names of involved individuals include: Vinny Crudele, Founder & President VCRUDELE@QDS.BIZ 203-758-9446 Leo Dinicola, Chief Financial Officer LDINICOLA@QDS.BIZ 860-417-3538 203-910-2316 leo_D@msn.com Linda Gordon, Director of Tax Support LGORDON@QDS.BIZ Ivana Crudele, Director of Assessor Support IVANA@QDS.BIZ 860-417-3617 203-518-1655 David Crudele, Chief Operations Officer DCRUDELE@QDS.BIZ 203-758-9446 203-598-2692 Bryan Reilly (IT) BMREILLY@QDS.BIZ 860-202-9557 Tom Tanganelli (IT) 860-456-2814 860-384-2449 tjtanganelli@gmail.com Jeffery Johnson (Sales) 860-643-8100 860-729-4551 jjohnson@qds.biz Bruce Lavoie (Programming) 860-620-0785 860-919-1343 bclhome@cox.net Vicki Powell (eQuality) 203-509-4255 powellcrudele@gmail.com We take no joy in exposing them. But in the end, they chose convenience over courage. A Better Way You may dislike what we’ve done — but it was never random. IT security is not a checkbox. It’s a culture. And we’ve seen firsthand how a failure to treat it seriously leads to the slow death of public trust. The worst thing about this breach is not the breach itself, but that it could have been prevented. We call on municipalities, CTOs, assessors, and public servants to work with real specialists who care more about solutions than headlines. The future belongs to those who build with integrity. listing https://gofile.io/d/5641ll Revenue: 9000000 Category: Software General In Stock: 0 files Data Size: Last Updated: 6/18/2025, 10:28:30 AM
Screen
2025-08-06
KINAS SOLICITORS kinas.co.uk In stock: 158930+ file data size: 138+ GB Clients' and companies' data. All accompanying documents for the provision of legal services. https://upload.disroot.org/r/NcbLvRJA#4yFm0LKryVpJs1ljs/872ovN2R4sjFEd5fFA7N2jyB8= We ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab. Advertising: We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients. Revenue: 5700000 Category: Law Firms & Legal Services In Stock: 0 files Data Size: Last Updated: 6/15/2025, 9:29:54 PM
Screen
2025-08-06
Cash and carry - COSAEN GRUP www.cosaen.es Cash and carry - COSAEN GRUP Professionals in the food sectorŃŽ Cosaen Grup SA has wholesale and retail warehouses offering a wide range of food and beverage products, as well as fresh and dry goods. https://www.zoominfo.com/c/cosaen-grup-sa/459229657 In stock: 983158 file data size: 243GB List of files, to confirm that we have all the files, you can request several files from the list and we will provide them to you. https://gofile.io/d/9w9Ww We ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab. Advertising: We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients. Revenue: 6000000 Category: Grocery Retail In Stock: 0 files Data Size: Last Updated: 5/30/2025, 8:42:18 PM
Screen
2025-08-06
PROMOSFERA S.r.l. promosfera.com passports, employee and client documents, databases of promotional participants - hundreds of thousands of emails + full names, tens of thousands of emails + full names + phone numbers internal company documentation https://gofile.io/d/5gNeSz https://gofile.io/d/dY7rYE We ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab. Advertising: We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients. Revenue: 5000000 Category: Call Centers & Business Centers In Stock: 0 files Data Size: Last Updated: 5/27/2025, 11:40:17 PM
Screen
2025-08-06
CLEARSYNTH LABS LIMITED www.clearsynth.com In stock: 2153940 file data size: 762GB Developments, formulas, research on medicinal products Personal data of employees, info on sales and projects. List of files, to confirm that we have all the files, you can request several files from the list and we will provide them to you. https://gofile.io/d/9w9WwE We ask all our partners, friends and clients to contact us to discuss the acquisition of this data. You know the contacts. For new members, please wait in the Contacts tab. Advertising: We are always ready to cooperate in any form, do you need specific data? We will try to provide it to you as soon as possible, we will receive and download your competitors' data, provide a list of what you are interested in. We are also ready to cooperate with law firms and data leak victims. We will provide all the information you need about the company that was negligent and provided access to data to its clients.
Screen
2025-08-06
LEARN is a Regional Educational Service Center www.learn.k12.ct.us LEARN is a Regional Educational Service Center working with and for its member districts to improve the quality of public education for all learners Revenue: 30000000 Category: Business Services General In Stock: 0 files Data Size: Last Updated: 5/27/2025, 11:02:16 PM
Screen
2025-08-06
Payme Ltd www.payme.co.uk Payme Ltd is a CIS payroll and contracting company with FCSA and professional passport accreditation for agencies and contractors. loading the entire company infrastructure, 1030 gigabytes of passport data and financial reports Revenue: 5000000 Category: Finance General In Stock: 0 files Data Size: Last Updated: 5/24/2025, 9:47:18 PM
Screen