Is BlackMatter a successor of Revil and DarkSide?

Is BlackMatter a successor of Revil and DarkSide?

It is now well known that Revil and DarkSide, some of the famous and notorious ransomware gangs, have allegedly stopped its task and left the ransomware group. Interestingly, new ransomware gangs are now claiming to be the successor of these two gangs.

After the disappearance of the two ransomware gangs, that emergence of new ransomware gangs has left the question of possible rebranding. The new gang named BlackMatter is also looking for affiliates. They have also posted advertisements on two of the forums of cybercrime.

Connection with REvil

Some of the targeting rules that are followed by BlackMatter are similar to those claimed by REvil. Rules like not targeting the healthcare sector and the government and nonprofit facilities.

Also, they make use of the same tactics that REvil used, and the Windows registry key of REvil was labelled BlackLivesMatter.

These facts do point towards the possibility that REvil may not have retired completely, rather they took a small break from the attacks, although we cannot disregard the possibility that the new BlackMatter ransomware are simply copying the REvil intentionally to gain credibility easily and fast.

Connection to the DarkSide-

The leak site of BlackMatter is uncannily similar to the leak site of the DarkSide, which is currently defunct. Also they said that they would not attack any critical infrastructure.


There is no concrete evidence of the connection between the gangs. To fill up the voids created by the silencing of the two gangs, new ransomware gangs are emerging. 


IEMLabs is an ISO 27001:2013 and ISO 9001:2015 certified company, we are also a proud member of EC Council, NASSCOM, Data Security Council of India (DSCI), Indian Chamber of Commerce (ICC), U.S. Chamber of Commerce, and Confederation of Indian Industry (CII). The company was established in 2016 with a vision in mind to provide Cyber Security to the digital world and make them Hack Proof. The question is why are we suddenly talking about Cyber Security and all this stuff? With the development of technology, more and more companies are shifting their business to Digital World which is resulting in the increase in Cyber Crimes.

Leave a comment

Your email address will not be published.

This site is under maintenance,
some features might not work!!!