Ransomware
BianLian Ransomware GroupBianLian Data Extortion Group
Attribution
Financially motivated (unattributed; assessed Russia-based)
Motivation
Financially motivated (ransomware / data extortion)
Attribution confidence
medium
Sectors
Maritime/industrial
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting Bahrain (Maritime/industrial sector).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.