Loading threat actor…
BlackForums is a cybercriminal forum and community established on April 9, 2023. It is a constituent member of FiveFamilies, an alliance formed in August 2023 that also includes ThreatSec, GhostSec, Stormous, and SiegedSec. BlackForums' identified role within the alliance is maintaining the forum and handling media activities, including redistributing FiveFamilies information. Its administrators maintain connections with other alliance members. Membership in FiveFamilies does not establish BlackForums' responsibility for intrusions, data leaks, or ransomware operations conducted by other constituent groups.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 malware family attributed to this actor across reporting.
6 indicators attributed to this actor: domains, IPs, hashes, and other artifacts pulled from reporting. View more in app.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Member of the 'Five Families' alliance with SiegedSec and other groups, which collectively claimed multiple breaches before becoming inactive.
A named member of the FiveFamilies coalition responsible for forum maintenance and media activity. The report connects Ransomed.vc to BlackForums through Telegram account metadata and identifies BlackForums administrators whose profiles also reference FiveFamilies. It does not attribute a specific malware deployment or attack to BlackForums.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.