- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1170 · bjorka
What it is
Bjorka is an underground actor persona that has claimed attacks on victims in a wide range of sectors and geographies. Researchers assess that the Bjorka persona is likely the administrator of a "data leak site" discovered in January 2025, which operates under the moniker "Babuk 2", ostensibly in reference to the Babuk ransomware that was highly active in the early 2020's. Researchers also assessed that much of the alleged victim data published on the site was likely recycled from previous information leaks.<sup>[Cyjax Bjorka January 29 2025]</sup>
Tools
The tools and malware families the sources tie to it.
- Archelaus Beta
- GraphicBooting