BlueBottle is a cyber-crime group targeting the financial sector in Francophone countries, known for living off the land techniques and commodity malware.
BlueBottle is a cyber-crime group targeting the financial sector in Francophone countries. They heavily utilize living off the land techniques, dual-use tools, and commodity malware, with no custom malware deployed in this campaign. Defenders should monitor for abnormal use of legitimate network tools and unauthorized financial transactions.
Bluebottle, a cyber-crime group that specializes in targeted attacks against the financial sector, is continuing to mount attacks on banks in Francophone countries. The group makes extensive use of living off the land, dual-use tools, and commodity malware, with no custom malware deployed in this campaign.
BlueBottle primarily targets the financial sector, especially banks, in Francophone countries.
No custom malware has been identified in this campaign. The group heavily utilizes living off the land techniques, dual-use tools, and commodity malware.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.