thegreenbloodgroup Ransomware
Tracked since Jan 29, 2026
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
The Green Blood Group is an emerging ransomware operation first identified in early 2026 whose Go-based Windows payload uses ChaCha8 encryption and aggressively destroys backup and recovery options, targeting organizations in India, Senegal, Egypt, Colombia, and Belgium.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live