Bluebox
Bluebox is a data extortion group that emerged in December 2024, employing double-extortion tactics against victims primarily in France, Sweden, and the French Caribbean, and threatening to notify data protection authorities to add regulatory pressure on victims.
Victims
3
First Discovered
2024-12-11
victim
Last Discovered
2024-12-17
victim
Inactive Since
1yr
more than
Avg Delay
6.7
days
Infostealer
33.3%
victims with domain
Countries
2
hit
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Bluebox | No | 2026-04-28T07:23:01 |
zu3wfrmrkl4ltqqnpt3owp3cwa33rqwod4gpe3ttb5o4vf2is2gzm6qd.onion
|
Target
Top 5 Activity Sectors
- Transportation 1
- Manufacturing 1
- Professional Services 1
Top 5 Countries
-
France
2
-
Sweden
1
Heatmap
YARA Rules (1)
Indicators of Compromise (IoCs) (2)
Email
1
tox
1
| Type | IOC |
|---|---|
Email
|
aocpocqotox@onionmail.org
|
tox
|
E39D0A412302DF31B24613AA88D5859A5432A5FCBAD25917E93DA84D56CB411F88119E8AEB78
|
Victims (3)
