BlackVault Ransomware Ransomware operator or affiliate
cluster blackvault · Iran
· 1 known address(es)
· BTC
Intrinsic severity9of 10
Default bandsevere
Attributionmoderate0.75 confidence
On-chain partyprincipal
Attribution quality
| Level | moderate |
| Source | synthetic |
| Basis | corroborated open-source intelligence |
Operator versus beneficiary
| Custody model | actor |
| On-chain party | principal |
| Beneficiary on-chain | yes |
Known addresses
bc1qdfgfz565tgwm...
Service risk profile
This cluster is not a service, so there is no AML posture to profile. Risk for it comes from its category and its exposure, not from its controls.