The HHS warned that BlackSuit was 'a threat actor to be closely watched in the near future.'
Right now, it cannot be considered ransomware-as-a-service as there aren't any known affiliates of BlackSuit. Of course, that might change in the future - but it's possible that the malicious hackers behind BlackSuit are happy keeping their weapon (and the profits it generates) to themselves.
BlackSuit encrypts files on your Linux and Windows systems and appends a '.blacksuit' extension to affected files. It also changes your desktop wallpaper, and drops a ransom note.
[
add
]
[
|
|
...
]