Threat actorRussiaTracked since 2026-04

The Green Blood Group

Also known as:Green BloodTheGreenBloodGREENBLOOD

As of 2026-05-30, The Green Blood Group is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as Green Blood, TheGreenBlood, GREENBLOOD.

Tracked threats: 11 high
First seen: 2026-042026-04-05
Last seen: 2026-042026-04-05
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: RussiaNation or origin

Nation: Russia · 1 tracked threat(s) · Categories: RANSOMWARE

Activity timeline

The Green Blood Group appears in 1 tracked threat between 2026-04-05 and 2026-04-05.

Tracked threats

Green Blood v2.0 — Golang-Based Double-Extortion Ransomware Targeting South Asia & AfricaHIGH2026-04-05