Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
How evasion-resistant our detection coverage is against BianLian's techniques — Summiting the Pyramid scores analytics (1 brittle – 5 robust); the actor inherits through its TTPs. This is a detection-engineering metric, not an attribution signal — see Attribution for confidence.
Tools observed in intrusions leading to BianLian's ransomware, per the community Ransomware Tool Matrix — observed use, not exhaustive. Snapshot 2026-08-07.
+10 more relationships — see the relationships browser.