BlueSky is a ransomware variant that emerged in June 2022, primarily focused on financial extortion. This ransomware family is believed with high confidence to be operated by threat actors of Russian origin. It is notable for its rapid encryption capabilities achieved through multithreading, a technique that bears code similarities to Conti v3 and Babuk ransomware. Unlike some other prominent ransomware groups, BlueSky has not been observed operating a public data leak site. The group uniquely assigns a user ID to each victim, generated based on system information, to track them and manage the decryption process.

Aliases del actor

HeyokaMongallUNC94bisonaltontotontoteamAPT ICEFOG

Actores similares

apt-icefogactor · 1apt-c-01actor · 2apt-c-27actor · 2apt-45actor · 2apt-c-37actor · 1apt-c-23actor · 1hellsing-aptactor · 1apt-c-44actor · 1apt-c-38actor · 1apt-c-12actor · 1

Paises afectados

URLs nuevas detectadas en IntelTracker