Bl00dy ‘bloody’ Ransomware Gang

Threat Actor

The Bl00dy 'bloody' cybergang was identified in September 2022 and has been defined as a "son of Lockbit", which used the builder released by the famous criminal gang to be able to create its own strain of malware that encrypted files with the extension . bl00dy.

However, according to the experts, the group is evolving continuously from one malware to another for two reasons: so they can avoid detection and also they have all the benefits of the functions of the various malware at their fingertips.

Incidents Associated with this Threat

December 12, 2022: Bl00dy ransomware Gang Targets Italian Steel Manufacturing Group Lucchini RS

Malware Used by this Threat Actor

No malware identified for this threat actor.