BloodAlchemy

aliases

Last seen:Mar 17, 2026

Intelligence Profile

This malware family is the suspected successor to ShadowPad and Deed rat.

Threat Analysis

BloodAlchemy is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog-en.itochuci.co.jp/entry/2024/05/23/090000

→https://web-assets.esetstatic.com/wls/en/papers/threat-reports/eset-apt-activity-report-q2-2025-q3-2025.pdf

→https://www.elastic.co/security-labs/disclosing-the-bloodalchemy-backdoor

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

BloodAlchemywin.bloodalchemy

External Intelligence

Malpedia: win.bloodalchemy

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search BloodAlchemy