The up-and-coming BlackByte ransomware-as-a-service gang has made headlines multiple times during the weekend. The San Francisco 49ers NFL football team fell victim to a ransomware attack and appeared on BlackByte’s leak site just a few days before the Rams vs. Bengals Superbowl. The 49ers organization stated the breach was limited to the corporate IT network, which often means little customer or third-party information is affected. Following the attack, the US Federal Bureau of Investigation (FBI) released a report stating BlackByte ransomware has compromised “multiple US and foreign businesses, including entities in at least three US critical infrastructure sectors (government facilities, financial, and food & agriculture).” While attacking critical infrastructure is not new for ransomware groups, most have buckled under the pressure of US law enforcement and added these industries to their list of “do-not-target” sectors handed out to new recruits. Though they are small, BlackByte’s carefree attitude will most likely draw unwanted attention from law enforcement in the near future. CTIX analysts are monitoring the BlackByte ransomware group and will update with any new developments.