Blue Tsunami
Also known as Black Cube
Blue Tsunami, also known as Black Cube, is a cyber mercenary group associated with the private intelligence firm Black Cube. They target individuals in various industries, including human rights, finance, and consulting. Blue Tsunami engages in social engineering and uses techniques such as honeypot profiles, fake jobs, and fake companies to gather human intelligence for their clients. LinkedIn and Microsoft recently took down numerous fake accounts and company pages linked to Blue Tsunami.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
- Reading that Elon Musk spent 474 million contributing to the Republicans campaign, and seeing the blue tsunami this morning is just a testament of how money andmastodon · Nov 6, 2026
- In my personal headcanon, the real reason why we experienced a blue tsunami is because @ hacks4pancakes put out the word that their ballot was stolen by the regmastodon · Nov 5, 2026
- Newsweek: 5 Hard Truths for Democrats After Their Blue Tsunami https://www. newsweek.com/5-hard-truths-for -democrats-after-their-blue-tsunami-12662915 Updated mastodon · Nov 4, 2026
- Blue tsunami? # SeeYourDoctorIfWaveHurtsYourFeelsmastodon · Nov 4, 2026
References
- https://precisionpconline.com/a-unified-front-against-cyber-mercenaries/
- https://www.microsoft.com/en-us/security/blog/2023/11/09/microsoft-shares-threat-intelligence-at-cyberwarcon-2023/
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.
