BlackLock ransomware onslaught: What to expect and how to fight it - Help Net Security

BlackLock, a ransomware-as-a-service (RaaS) group, is rapidly gaining prominence in 2025 due to its active presence on forums, aggressive recruitment, and evolving attack tactics. Organizations should bolster defenses against BlackLock by securing ESXi environments and hardening Entra ID-Active Directory synchronization flows. These measures, along with foundational security practices, can help mitigate the threat posed by BlackLock and other ransomware groups.