Bl00dy – New Ransomware Strain Active in the Wild

Bl00dy is a newly observed ransomware family performing double-extortion attacks: it encrypts files (appending .bl00dy), drops ransom notes, and publishes stolen data via a Telegram channel if victims refuse to pay. The report provides static/dynamic technical analysis (mutex resolution, CreateThread, CryptoAPI usage, NetShareEnum for lateral movement, WMI shadow copy deletion), lists targeted industries and known victims, and supplies at least one sample hash and recommended mitigations.