Threat Actors bluewhale

bluewhale

TLP:CLEAR

Active

Kill Chain Analysis Generate Graph Hunt Package

Description

Known victims: 2

Goals & Targeting

Objectives

Ransomware

Financial Gain

AI Analysis

No AI analysis yet.

ATT&CK Techniques

No techniques linked yet.

Software / Tooling

No tools linked yet.

Campaigns / Victims

All campaigns →

Inactive

BlueWhale: Satellite Developer Server

Ransomware attack attributed to BlueWhale. | Sector: Technology | A software developer at a company | Source: https://www.ransomware.live/id/U2F0ZWxsaXRlIERldmVsb3BlciBTZXJ2ZXJAQmx1ZVdoYWxl

Aug 10, 2026

TLP:CLEAR

Inactive

BlueWhale: FiferFox Minecraft Server

Ransomware attack attributed to BlueWhale. | Sector: Technology | This is a basic Minecraft Server. | Source: https://www.ransomware.live/id/RmlmZXJGb3ggTWluZWNyYWZ0IFNlcnZlckBCbHVlV2hhbGU=

Aug 8, 2026

TLP:CLEAR

Observed Data

No observed data linked yet.

Indicators of Compromise

No IOCs linked yet.

References

No references recorded yet.

Intel Summary

Techniques

Tools

Campaigns

IOCs

Observed Data

Tactics

Details

Type: Criminal
Sophistication: Medium
Primary Motivation: Organizational gain
Confidence: 80%
First Seen: Aug 8, 2026
Last Seen: Aug 10, 2026
Added: Aug 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.