Ransomware Go Active since 2022

BianLian

BianLian Android trojan → Go ransomware evolution 2022. Double extortion. FBI/CISA warning.

Threat Profile
Type Ransomware
Programming LanguageGo
C2 ProtocolHTTPS
First Seen2022
Targets Saglik/Kurumsal
Purpose / Capabilities
  • Ransomware (Double Extortion)
No C2 servers have been identified for this family yet.

Research Reports (2)

Critical

BianLian Ransomware -- 791KB, lbl.me C2, Veri Sızdırma + Fidye Çifte Baskı | Kritik

BianLian 791KB. lbl.me C2 domain. Android bankacılık trojanından fidye yazılımına evrim. Çifte baskı gasp.

Read Report →
Critical

BianLian -- 4MB Go Binary, .Zxx/.yMS/.xNSW Sifreleme Uzantilari, C2 Config | Kritik

BianLian 4MB Go binary. .Zxx, .yMS, .xNSW, .XixM şifreleme uzantıları. C2 config fragmentleri.

Read Report →