Skip to content
NEW
BlackFog Named “Endpoint Security Solution Provider of the Year” in 10th Annual CyberSecurity Breakthrough Awards Program
WEBINAR: Introducing ADX Vision 2.0: Securing Generative and Agentic AI – Watch On Demand!
BlackFog Launches ADX Vision 2.0 to Secure the Next Generation of Enterprise AI
BlackFog Logo
  • Products

    Platform

    ADX Vision 2.0

    An independent control layer for AI, now covering agentic AI and prompt injection

    ADX Vision 30

    A 30-day AI exposure audit by BlackFog that reveals how artificial intelligence is used across your organization.

    ADX Protect

    Ransomware & exfiltration protection with behavioral profiling

    ADX Instinct

    Expert-led virtual CISO for risk & compliance

    One Platform

    The ADX Platform

    ADX Vision 2.0 + ADX Protect

    Two products, one layer on the endpoint. ADX Vision 2.0 governs AI and agents; ADX Protect stops it leaking to attackers.

    See Them Together
    Supported Platforms
  • Solutions

    By Use Case

    Ransomware
    Shadow AI
    Insider Threats
    Compliance & DPIA

    By Industry

    Healthcare
    Financial Services
    Legal
    Government & Public Sector
    Education
    Manufacturing
    For Partners

    MSPs & MSSPs

    Multi-tenant anti data exfiltration, built to scale across clients.

    Explore Partner Program
  • Research Centers

    Research Centers

    Ransomware Research Center

    The State of Ransomware Report. The industry’s most cited ransomware report.

    Explore
    AI Research Center

    Shadow AI, the EU AI Act, and agentic-AI threat research.

    Explore
  • Resources
    Featured

    The State of Ransomware 2026

    The industry’s most-cited research of ransomware attacks, updated monthly.

    Read the Latest Report

    Library

    Resource Center
    Blog
    Threat Intelligence
    Case Studies

    Reference

    Support
    Glossary
    FAQs
    Videos
    Webinars
  • Partners

    Partner with BlackFog

    Become a Partner

    Join the BlackFog partner program for MSPs & MSSPs

    Partner Console Login

    Sign in to the multi-tenant management console

    Built for Providers
    ADX Agility

    Manage every customer from one console. Multi-tenant anti data exfiltration built for MSPs & MSSPs

  • Company

    About

    Our Story
    Leadership
    Awards
    Careers

    Newsroom

    News
    Press Releases
    Events

    Get in Touch

    Contact
    Join Us

    We’re Hiring

    Join us and help secure AI one client at a time.

    Careers at BlackFog
  • PRODUCTS
    • ADX Vision 2.0
      • ADX Vision 30
    • ADX Protect
    • ADX Instinct
    • ADX Platform
    • Supported Platforms
    • Book A Demo
  • SOLUTIONS
    • BY USE CASE
      • Solutions · Ransomware
      • Solutions · Shadow AI
      • Solutions · Insider Threats
      • Solutions · Compliance DPIA
    • BY INDUSTRY
      • Industry · Healthcare
      • Industry · Financial Services
      • Industry · Legal
      • Industry · Government Public Sector
      • Industry · Education
      • Industry · Manufacturing
  • RESEARCH CENTERS
    • AI Research Center
    • Ransomware Research Center
  • RESOURCES
    • LATEST RANSOMWARE REPORT
    • LIBRARY
      • Resource Center
      • Blog
      • Threat Intelligence
      • Case Studies
    • REFERENCE
      • Support
      • Glossary
      • FAQs
      • Videos
      • Webinars
  • PARTNER WITH BLACKFOG
    • Partner Program
    • Partner Console
    • ADX Agility
  • ABOUT BLACKFOG
    • Our story
    • Leadership Team
    • AwardsDiscover BlackFog’s award-winning cybersecurity technology and explore the industry recognition we’ve received for innovation in data protection.
    • Careers
    • Contact us
  • NEWSROOM
    • News
    • Press Releases
    • Events
Login
Demo

Exploits

  • Categories: Data Exfiltration, Breach, Exploits
    etherhiding

    EtherHiding: How Ransomware Groups Use the Blockchain to Resist Takedowns

    Just a few months ago, attackers used Ethereum to manage malware communications during an intrusion that ended with The Gentlemen ransomware being deployed. By updating ⟶

    Read more
    By Darren WilliamsLast Updated: October 1st, 20265.4 min read
  • Categories: AI security, Cybersecurity, Exploits
    claude coding jailbreak

    Claude Coding Jailbreak: Latest Risks And Enterprise Impact

    Most jailbreaks begin with a prompt designed to make a model provide something it should refuse. Asking for credential-stealing code as a fictional exercise is ⟶

    Read more
    By Darren WilliamsLast Updated: October 1st, 20265.9 min read
  • Categories: Breach, Data Exfiltration, Exploits
    Bee Stealer

    Bee Stealer Targets Codex And Claude, Uses AI To Profile Victims

    BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.

    Read more
    By Darren WilliamsLast Updated: October 5th, 20264.5 min read
  • Categories: Breach, Data Exfiltration, Exploits
    The Gentlemen

    The Gentlemen: How GentleKiller Clears the Path to Encryption

    The Gentlemen turns ransomware, data theft, and defense evasion into a managed service for affiliates, with cross-platform encryptors and a 90 percent revenue share.

    Read more
    By Darren WilliamsLast Updated: August 10th, 20263.8 min read
  • Categories: Breach, Data Exfiltration, Exploits
    MedusaHVNC

    MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions

    MedusaHVNC is a newly uncovered hidden desktop malware family that gives operators access to live, logged-in browser sessions on a victim’s Windows device.

    Read more
    By Darren WilliamsLast Updated: July 27th, 20264.6 min read
  • Categories: Dark Web, Data Exfiltration, Exploits

    Inside OnyxC2: The New Stealer Targeting 210 Apps

    Discover OnyxC2, the new malware-as-a-service stealer targeting 210 apps. Learn how it evades detection, steals credentials, and enables data theft.

    Read more
    By Darren WilliamsLast Updated: September 29th, 20268.2 min read
  • Categories: Breach, Data Exfiltration, Exploits
    Oracle Breach

    Oracle Breach: What Happened and Why It Matters

    The 2025 Oracle breach exposed millions of records across three separate incidents. Learn how attackers got in, which industries were hit, and how to protect your organization.

    Read more
    By Rebecca HarpurLast Updated: April 28th, 20266.1 min read
  • Categories: Cybersecurity, Data Exfiltration, Exploits
    Venom Stealer featured image

    Venom Stealer Turns ClickFix Into a Full Exfiltration Pipeline

    BlackFog analyzes Venom Stealer, a new MaaS infostealer that uses ClickFix delivery to launch an automated exfiltration pipeline covering credential theft, wallet cracking, and fund sweeping.

    Read more
    By Darren WilliamsLast Updated: March 31st, 20264.4 min read
  • Categories: AI security, Data Exfiltration, Exploits
    LotAI_featured image

    LotAI: How Attackers Weaponize AI Assistants for Data Exfiltration

    What happens when attackers use your approved AI tools as a data exfiltration channel? New research reveals how the LotAI technique turns Copilot and Grok into covert C2 relays.

    Read more
    By Rebecca HarpurLast Updated: March 15th, 20266.3 min read
  • Categories: Data Exfiltration, Exploits, Ransomware
    Steaelite RAT_featured image

    Steaelite RAT Enables Double Extortion Attacks from a Single Panel

    Steaelite is a newly emerging RAT that unifies credential theft, data exfiltration, and ransomware in a single web panel, accelerating double extortion attacks.

    Read more
    By Darren WilliamsLast Updated: February 25th, 20264.9 min read
  • Categories: Cybersecurity, Data Exfiltration, Exploits
    Lotus C2

    Lotus C2 – A New C2 Framework Sold as a Cybercrime Kit

    Learn how Lotus C2 enables credential theft, data exfiltration, and mass attacks, blurring red team and cybercrime lines.

    Read more
    By Brenda RobbLast Updated: January 29th, 20264.9 min read
  • Categories: Exploits, Ransomware, Variants
    Claude Hijack

    GTG 1002: Claude Hijacked For The First AI Led Cyberattack

    Anthropic’s Claude was manipulated into a cyber espionage campaign. See how it happened, why it matters, and how ADX can block machine-speed data theft.

    Read more
    By Rebecca HarpurLast Updated: November 25th, 20253.4 min read
12Next

Company

  • About BlackFog
  • Leadership
  • Awards
  • Careers
  • Contact us
  • Support
Home
  • Contact us
  • Support
  • ADX Platform
  • Resources
  • Blog

LOCATIONS · San Francisco · London · Belfast

Home

Platform

  • ADX Vision 2.0
  • ADX Protect
  • ADX Platform
  • ADX Vision 30
  • ADX Agility
  • ADX Instinct
  • Supported Platforms
  • Release Notes

Resources

  • Resource Center
  • AI Research Center
  • Ransomware Research Center
  • Knowledge Base
  • Glossary
  • FAQs
  • Blog

Headquarters

BlackFog Inc.
1 Embarcadero Ctr, Suite 1200, San Francisco, CA 94111, United States

United Kingdom

BlackFog UK Ltd.
167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom

Northern Ireland

BlackFog UK Ltd.
Custom House, Custom House Square, Belfast BT1 3ET, Northern Ireland

© 2026 BlackFog. All Rights Reserved.

  • Privacy Statement
  • Trust Center
  • Security
Page load link
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Go to Top