Skip to content

Threat actor

Blackdot Solutions

Last fetched

Blackdot Solutions is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Blackdot Solutions, a Cambridge-based company, offers a surveillance and investigation platform called Videris, which is marketed as an open-source intelligence (OSINT) tool. Videris is designed to help government agencies, law enforcement, banks, and corporations conduct discreet investigations into crimes. It organizes publicly available information into charts and graphs for easier analysis. However, a leaked 2018 user manual revealed that Blackdot provided instructions on creating fake Facebook and LinkedIn accounts to gather data from users, including circumventing privacy settings. These practices, which involve using proxy servers and "breaking in" fake accounts by mimicking normal user behavior, were detailed to avoid detection by social media platforms.

Techniques by tactic

No ATT&CK techniques are recorded for Blackdot Solutions in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Blackdot Solutions today — this states the absence of a published link, not that Blackdot Solutions has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Blackdot Solutions into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.