Evaluations of ransomware groups BlueSky and Cuba
Palo Alto Networks, along with its Unit 42 malware analysis team, presented initial research on new ransomware groups: BlueSky Ransomware and Cuba Ransomware. These are the main goals of the attackers. BlueSky Ransomware is a new ransomware family that uses modern techniques to bypass security defenses. Unit 42 found code fingerprints of ransomware samples that can be linked to the Conti ransomware group. BlueSky is also very similar to Babuk ransomware. BlueSky mainly targets Windows hosts and uses multithreading to encrypt files on the host, thus speeding up encryption. Find the full blog post...