BlueSky ransomware was created to infiltrate users’ devices and lock all of the personal files inside them. The icons get also changed to white pages, so users immediately notice that something is wrong. Affected files include photos, videos, documents, etc. They get appended with the .bluesky extension.
So if a file was previously named picture.jpg, after encryption is complete, it would look like this – picture.bluesky. Shortly after the encryption process is complete, two ransom notes are generated on the machine which inform users about their current situation. The files are named “# DECRYPT FILES BLUESKY #.html” and “# DECRYPT FILES BLUESKY #.txt.”