Blackgear

Also reported as Topgear, Comnie and BLACKGEAR. Linked to China by three sources.

Reports: 10
Last reported: 6 April 2026
Known CVEs: 2
Origin: China

ID: blackgear
Sources: MISP ETDA Malpedia
Merge evidence: 5 alias matches

Reports per quarter

2016 Q4: 4 reports
2017 Q1: no reports
2017 Q2: no reports
2017 Q3: no reports
2017 Q4: no reports
2018 Q1: 1 report
2018 Q2: no reports
2018 Q3: 2 reports
2018 Q4: no reports
2019 Q1: no reports
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: 1 report
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 2 reports

Dated reports, 2016 Q4 to 2026 Q2.

CVEs named in reports

CVE-2016-3298 KEV
CVE-2016-7255 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

6 April 2026

Comnie Continues to Target Organizations in East Asia

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Comnie Continues to Target Organizations in East Asia
6 April 2026

Comnie Continues to Target Organizations in East Asia

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Comnie Continues to Target Organizations in East Asia
29 September 2022

EN-BlackTech_2021

Malpedia library date NTT fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor EN-BlackTech_2021
17 July 2018

Blackgear Cyberespionage Campaign Resurfaces

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Blackgear Cyberespionage Campaign Resurfaces
17 July 2018

Blackgear Cyberespionage Campaign Resurfaces, Abuses Social Media for C&C Communication

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Blackgear Cyberespionage Campaign Resurfaces, Abuses Social Media for C&C Communication
1 February 2018

unit42-comnie-continues-target-organizations-east-asia

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor unit42-comnie-continues-target-organizations-east-asia
20 December 2016

TrendLabs Security Intelligence BlogBLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List - TrendLabs Security Intelligence Blog

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor TrendLabs Security Intelligence BlogBLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List - TrendLabs Security Intelligence Blog
27 October 2016

BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List

file creation date Trend Micro fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List
27 October 2016

BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor BLACKGEAR Espionage Campaign Evolves, Adds Japan To Target List
27 October 2016

Blackgear Cyberespionage Campaign Resurfaces

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Blackgear Cyberespionage Campaign Resurfaces

Newest first. Details opens the report in Explore.