Conversation

Someone has been snail mailing letters to various businesses pretending to be the BianLian ransomware group. The letters say that the recipient's network has been taken over by the ransomware group, and include a QR code where recipients can scan to make a cryptocurrency payment.

The FBI just released an alert about this, saying nobody should be paying these, and that the whole thing is a scam. But these guy just pissed off the U.S. Postal Service, which also has its own considerable law enforcement investigative power.

https://www.ic3.gov/PSA/2025/PSA250306-2

A reader whose employer got one of these this week shared a copy of their extortion demand. I know it's not the clearest picture, but you get the idea.