Black Shadow

Black Shadow, also known as Agrius, Pink Sandstorm, AMERICIUM, and Agonizing Serpens, is an Iranian threat actor linked to the Ministry of Intelligence and Security (MOIS). Active since 2020, Black Shadow has conducted ransomware and wiper attacks primarily targeting entities in the Middle East, with a focus on Israeli organizations. The group's operations are characterized by their use of destructive malware and targeted cyber campaigns.