Active ransomware operator
← All groupsBluesky
0 victims indexed · last activity 3 years ago
0
Victims indexed
—
Active period
—
Countries hit
At a glance
- Status
- active
- First seen
- —
- Last activity
- 3 years ago
- Onion sites
- 1 known endpoint
About
Auto-discovered from ransomware tracking sources
References
9 linksExternal sources curated by the MISP threat-intel community.
- unit42.paloaltonetworks.com/bluesky-ransomware/
- sentinelone.com/blog/bluesky-ransomware-ad-lateral-movement-evasion-and-fast-encryption-puts-threat-on-the-radar/
- yoroi.company/research/dissecting-bluesky-ransomware-payload/
- ransomlook.io/group/bluesky
- watchguard.com/wgrd-ransomware/bluesky
- sentinelone.com/anthology/bluesky/
- unit42.paloaltonetworks.com/bluesky-ransomware/
- fortinet.com/blog/threat-research/ransomware-roundup-new-variants
- cloudsek.com/blog/technical-analysis-of-bluesky-ransomware
Recent victims
Loading…
Onion infrastructure
1 known- http://ccpyeuptrlatb2piua4ukhnhi7lrxgerrcrj4p2b5uhbzqm2xgdjaqid.onion
Source
Updated 3 years agoData on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.