BlueSky Ransomware: Fast Encryption via Multithreading

BlueSky ransomware is an emerging family of malware that targets Windows hosts and demands a ransom for the decryption of data, according to research conducted by Palo Alto Networks and carried out a security analysis.

REFERENCE: https://unit42.paloaltonetworks.com/bluesky-ransomware/

TAGS: BlueSky, Ransomware, RedLine

MALWARE FAMILIES: BlueSky, Conti, RedLine Stealer

ATT&CK IDS: T1027 - Obfuscated Files or Information, T1083 - File and Directory Discovery, T1106 - Native API, T1135 - Network Share Discovery, T1140 - Deobfuscate/Decode Files or Information, T1486 - Data Encrypted for Impact

Read More:

https://otx.alienvault.com/pulse/62f4e3f678f5f9f311fb1a67