Analysis of BlackByte Ransomware’s Go-Based Variants

Key Points

BlackByte is a full-featured ransomware family that first emerged around July 2021

The ransomware was originally written in C# and later redeveloped in the Go programming language around September 2021

The threat group exfiltrates data prior to deploying ransomware and leaks the stolen information if a ransom is not paid

The group has demanded multi-million dollar ransoms from some victims

BlackByte ransomware employs various anti-analysis techniques including a multitude of dynamic string obfuscation algorithms

In early versions of …

analysis blackbyte blackbyte ransomware go ransomware