Unit 42: BianLian group is one of the most active and prevalent extortion groups (top 10 most active). Maintaining their TTPs of infiltrating corporate networks, the BianLian group has shown adaptiveness to the ransomware market demands. They have shifted from double-extortion into being focused solely on extortion efforts, pressuring their victims into paying the ransom without encrypting their files. A possible connection to the Makop ransomware group was also found, due to their mutual use of a custom tool. IOC provided.
🔗 https://unit42.paloaltonetworks.com/bianlian-ransomware-group-threat-assessment/