Bluesky

First seen
2023-05-15 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:46:36

Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications energy-and-utilities

Context

Bluesky is a ransomware known for encrypting files on infected systems and demanding ransom payments typically in cryptocurrency. It has been observed in attacks against various industries, with a focus on critical infrastructure and sensitive sectors.

Reports & references

  • fortinet.com — Ransomware Roundup New Variants (report)
  • Palo Alto Unit 42 — Bluesky Ransomware (report)
  • sentinelone.com — Bluesky Ransomware Ad Lateral Movement Evasion And Fast Encryption Puts Threat On The Radar (report)
  • yoroi.company — Dissecting Bluesky Ransomware Payload (report)
  • ransomlook.io — Bluesky (report)
  • watchguard.com — Bluesky (report)
  • sentinelone.com — Bluesky (report)
  • Palo Alto Unit 42 — Bluesky Ransomware (report)
  • cloudsek.com — Technical Analysis Of Bluesky Ransomware (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Bluesky (report)
  • cloudsek.com — Technical Analysis Of Bluesky Ransomware (report)
  • thedfirreport.com — Sql Brute Force Leads To Bluesky Ransomware (report)

External references