‼️ Blackwater Ransomware Chat Portal: http://6t5g73fbzdjuhvvovuvuhc4mdgefrwn75szssx4ftqzxyuacdij...

Summary

A Tor onion address allegedly belonging to the Blackwater ransomware gang's chat portal has been shared publicly. The link appears to be a command-and-control or victim negotiation endpoint used by the threat actor. This disclosure may indicate operational security lapses or intentional exposure by security researchers or threat hunters.

Indicators of Compromise

• url — http://6t5g73fbzdjuhvvovuvuhc4mdgefrwn75szssx4ftqzxyuacdij47pad.onion
• domain — 6t5g73fbzdjuhvvovuvuhc4mdgefrwn75szssx4ftqzxyuacdij47pad.onion

Entities