THREAT OPS › Threat News › [blacksuit] http://metromont.com — ransomware leak-site post
[blacksuit] http://metromont.com — ransomware leak-site post
Ransomware group: blacksuit Victim (as posted on leak site): http://metromont.com Discovered: 2025-05-29 12:39:59.774067 Source: ransomwatch leak-site monitor Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- metromont.comdomain
Original source: https://github.com/joshhighet/ransomwatch