BlackByte

BlackByte is a ransomware threat actor operating since at least 2021 and associated with the group Hecamede. It is linked to several versions of ransomware labeled BlackByte Ransomware, including BlackByte 2.0, which employs more robust encryption mechanisms compared to earlier variants. The actor has targeted critical infrastructure entities and other organizations across North America. Initial ransomware operations used a common encryption key, enabling the development of a universal decryptor.