- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1171 · bl00dy-ransomware-gang
What it is
Bl00dy self-identifies as a ransomware group. It gained attention in May 2023 for a series of data exfiltration and encryption attacks against education entities in the United States that featured exploit of vulnerabilities in PaperCut print management software, which is prevalent in the sector.<sup>[U.S. CISA PaperCut May 2023]</sup>
**Related Vulnerabilities**: CVE-2023-27350<sup>[U.S. CISA PaperCut May 2023]</sup>
Tools
The tools and malware families the sources tie to it.
- UNITEDRAKE
- Xploit