BianLian

A financially motivated cyber-extortion group active since 2022. It initially combined data theft with Go-based ransomware but later shifted largely to encryption-free extortion, exploiting remote services and vulnerable systems, stealing sensitive data, and threatening publication.