The Green Blood Group
The Green Blood Group is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
source: ransomware.live1 refs →
The Green Blood Group
The Green Blood Group is a cybercriminal group known for ransomware and double extortion tactics.
Analyst brief
The Green Blood Group is a cybercriminal group active in ransomware and extortion operations. They focus on publicly listing and shaming victims on their leak site. Their key TTPs likely include file encryption, data exfiltration, and double extortion tactics. Defenders should prioritize network segmentation, maintaining offline backups, and monitoring for compromised credentials.
crime
FAQ2
What tactics does The Green Blood Group use?
They apply file encryption, data exfiltration, and double extortion tactics.
What should defenders prioritize against The Green Blood Group?
Network segmentation, maintaining offline backups, and monitoring for compromised credentials should be prioritized.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.