Blackjack

Blackjack is a malicious software (malware) employed by the Ukrainian Blackjack group, designed to infiltrate and exploit computer systems. The malware has been used against Russian targets, where it disrupts operations, steals personal information, and can potentially hold data hostage for ransom. It infiltrates systems through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside, it wreaks havoc on the system, causing significant damage. The Blackjack group has been linked to another previously known group, Twelve, as detailed in our report. Both groups use similar tools, malware, and procedures, distributing and executing their harmful programs using the same methods. Their targets are also similar, primarily focusing on organizations located in Russia. This evidence suggests a close connection between the two entities. However, upon further investigation, we suspect that the Blackjack and Twelve groups may not just be independent entities with similar targets and methods. Instead, they appear to be part of a unified cluster of hacktivist activity aimed at Russian organizations. This implies a larger, coordinated effort to disrupt and exploit these targets, indicating a more serious threat than initially perceived.