Bl00dy
(Active)
Aliases
Bl00dy Cult
Description
This entry is under construction. However, we have included some details below.
Ransomware Type
Crypto-Ransomware
Data Broker
First Seen
Lineage
Threat Actors
Tipo
Actor
Individual
anongod
Extortion Links
Medio
Link
Telegram
https://t.me/bl00dy_Ransomware_Gang
Telegram
https://t.me/bl00dy_ransomware_Gang_Backup
Telegram
https://t.me/+W-vMALJT0DgxMmZk
Twitter | X
https://twitter.com/BLOODY48139604
Extortion Types
Blackmail
Direct Extortion
Double Extortion
Employ Hitman
Extortion Amounts
Amount
$1,500
$2,000
$5,000
$15,000
Communication(8)
Medio
Identificativo
Email
bloody.ransomware.supportt@armormail.net
Email
decrypt.support@privyonline.com
Email
filedecryptionsupport@msgsafe.io
Email
fimaribahundqf@gmx.com
Telegram
@bl00dyAdmin
Telegram
@Bl00dy_Admin
Tox
E3213A199CDA7618AC22486EFECBD9F8E049AC36094D56AC1BFBE67EB9C3CF2352CAE9EBD35F
Tox
7D8796EB86CBF29F53F8A8447EABAF310ED898D9DEFF97AE09C1864C2A6B3B14ED8F82AE9B9D
Encryption
Type
Hybrid
Files
AES-256
Key
RSA-2048
Crypto Wallets
Blockchain Type
Crypto Wallet
BTC
bc1q81gnw0relr0msf0570vngkctkyqateen2ypar
File Extension
<file name>.<file extension>.bloody
<file name>.<file extension>.DRTTY
Ransom Note Name
How To Restore Your Files.txt
Read_Instructions_To_Decrypt.txt
Known Victims(26)
Industry Sector | Paese | Extortion Date | Amount (USD) |
---|---|---|---|
Healthcare & Medicine | United States | $5,000 | |
Healthcare & Medicine | United States | ||
Healthcare & Medicine | United States | ||
Information Technology | United States | ||
Religion | United States | ||
Fashion & Textiles | United States | ||
Media & Marketing | Russia | ||
Professional Services | Ukraine | ||
Aerospace & Aviation | Iran | $2,000 | |
Manufacturing | Italy | ||
Food & Beverage | Russia | $1,500 | |
Professional Services | United States | ||
Unknown | Unknown | ||
Education | United States | ||
Education | United States | $15,000 | |
Education | United States | ||
Education | United States | ||
Education | United States | ||
Education | India | ||
Education | United Kingdom | ||
Education | United Kingdom | ||
Education | Botswana | ||
Healthcare & Medicine | United States | ||
Legal | United States | ||
Banking & Finance | United States | ||
Legal | United States |
References & Publications(6)
DataBreaches.net: Leaked LockBit 3.0 builder used by ‘Bl00dy’ ransomware gang in attacks
DataBreaches.net: NC: ‘Ransomware cult’ claims to have hacked two local schools
DataBreaches.net: New York medical practices hit by “Bl00dy Ransomware Gang”
PCrisk: Bl00dy Ransomware
Twitter | X: @azalsecurity - anongod Bl00dy RAMP Post
Vladyslav Radetsky: .bl00dy ransomware [EN]