Ransomware Group intelligence
BlueWhale
ActiveTrack BlueWhale with 4 published victims and 1 known leak locations in a single intelligence view.
Overview
BlueWhale is tracked by Breach House as a ransomware group with 4 published victims.
The group is tracked across multiple victim records in the Breach House dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | bluewh6bk2qt6wjib7qxdtplhgbwbi3p7cgofwnshfl5xo3xgwgstrid.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (4)
Search, filter and paginate the victim timeline for BlueWhale. Showing 1–4 of 4.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | FiferFox Minecraft Server id31711 View details | IT | |||
|
FiferFox Minecraft Server is an online gaming server that provides a platform for players to access and play Minecraft games. The server operates in the IT sector, offering various features and gameplay modes for its users. FiferFox Minecraft Server was listed as a ransomware victim associated with BlueWhale |
|||||
| Ransomware | FiferFox Minecraft Server id31711 View details | IT | |||
|
This is a basic Minecraft Server. |
|||||
| Ransomware | Satellite Developer Server id31712 View details | IT | |||
|
Satellite Developer Server is a company operating in the IT sector, likely providing services related to satellite technology and development. The company's server is a critical component of its operations, supporting the development and deployment of satellite-related projects. Satellite Developer Server was listed as a ransomware victim associated with BlueWhale. |
|||||
| Ransomware | Satellite Developer Server id31712 View details | IT | |||
|
A software developer at a company |
|||||