BI
bianlian
🔴 Inactive
Status
Inactive
Total Victims
553
Active Sites
0 / 4
Has Parser
No
Top Target Countries
🇺🇸 US🌍 Unknown🇨🇦 CA🇮🇳 IN🇬🇧 GB
Top Target Industries
HealthcareBusiness ServicesManufacturingTechnologyUnknown
Country Distribution
🇺🇸 US269
🌍 Unknown135
🇨🇦 CA20
🇮🇳 IN18
🇬🇧 GB16
🇨🇳 CN12
🇩🇪 DE11
🇦🇺 AU9
Site Locations (4)
Description
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Ransom Notes (1)
Look at this instruction.txtBianlian - Look at this instruction
Your network systems were attacked and encrypted. Contact us in order to restore your data. Don't make any changes in your file structure: touch no files, don't try to recover by yourself, that may lead to it's complete loss. To contact us you have to download "tox" messenger: https://qtox.github.io/ Add user with the following ID to get your instructions: A4B3B0845DA242A64BF17E0DB4278EDF85855739667D3E2AE8B89D5439015F07E81D12D767FC Alternative way: swikipedia@onionmail.org Your ID: [snip] You should know that we have been downloading data from your network for a significant time before the attack: financial, client, business, post, technical and personal files. In 10 days - it will be posted at our site http://bianlianlbc5an4kgnay3opdemgcryg2kpfcbgczopmm3dnbz3uaunad.onion / http://bianlivemqbawcco4cx4a672k2fip3guyxudzurfqvdszafam3ofqgqd.onion with links send to your clients, partners, competitors and news agencies, that will lead to a negative impact on your company: potential financial, business and reputational loses. ---!!!---
Decryptor Available
Recent Victims (553 total)
View All| Victim | Country | Industry | Date |
|---|---|---|---|
CMC Technology Group | 🇻🇳 VN | Technology | Mar 31, 2025 |
Meridian Senior | 🇺🇸 US | Healthcare | Mar 31, 2025 |
Saunders and Saunders | 🇺🇸 US | Legal Services | Mar 31, 2025 |
Sonrisas Dental Health | 🇺🇸 US | Healthcare | Mar 31, 2025 |
Goshen Medical Center goshenmedical.org | 🇺🇸 US | Healthcare | Mar 22, 2025 |
Allworx | 🇺🇸 US | Telecommunication |