Ransomware needs a way in. Stolen credentials are the cheapest one.
BQTLock Ransomware Group
Ransomware group profile
8Victims
UnknownSource country
75Impact score
Also Known As
BAQIYATLock
Liwaa Mohammad
BQTLock
BQT Ransomware
bqtlock
Description
BQTLock, also known as Baqiyatlock313, is a ransomware group that emerged in July 2025, utilizing a Ransomware-as-a-Service model. Despite its pro-Palestinian messaging, the group's primary motive is financial gain, targeting various sectors through phishing and exploiting vulnerable systems.
Key insights
- •Operates under a Ransomware-as-a-Service model with tiered affiliate access.
- •Targets healthcare, manufacturing, and professional services sectors.
- •Employs double extortion techniques, threatening data publication if ransoms are unpaid.
- •Utilizes a hybrid AES-256 and RSA-4096 encryption scheme for file encryption.
- •Gains initial access through phishing, exposed RDPs, and vulnerable software.
Threat Level & Status Breakdown
For BQTLock · Based on incidents in selected period
1.5threat level
Aggressiveness2/ 10
Lethality0/ 10
Criticality2.7/ 10
Status Breakdown
Negotiating12.5%1
Claimed87.5%7
First seenOct 2025
Last seenApr 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedOct 8, 2026
Recent activity
Monthly attack count for BQTLock in the selected period
8Total attacks
4peak in Dec
2avg / month
↓ 1 vs first month
Intelligence
IOCs, YARA/Sigma rules, and related families for BQTLock
- a065c2d25096957126b9739f95810a12
- 4e7434ac13001fe55474573aa5e9379d
- 862f29aa00bb4ee33729bc6699990dbdf9ef890b8364f8288b173cb1ca5d6787
- 89c591228df334c3a974ed7b96e2060258171b78
- 618070d597dd73c43ba5d4bde2baa93a4f6038e3279de3bafe688caa5c409a58
- 49f89b2fdef345a9d92fc821e4a226d8ac99e4ca0d2d11b5654f6557800b85f2
- 53385e0fd7fc9c88080abf5b97cd5b84b31c876e
- 881b048234ebed82339244eb0c18580d785944dc82f83949f6adc1a9bc225c3b
- 196509ec4599d93a1cf42d70623ac9098c8979bb
- 69e6fa25e66c23121826805bbcb890ac
- f77c203d0c80598954c06a0f6f0c46f8b885ba423d12a21f13ded0168aa11b10
- 375d5d81cba2a78967604c6b77369e79
- 4369aed581de0fe84c25a1ef2c3cf0bb6bf70df8b51fdf38b3b0b2a55f43261b
- ebc2ad209a2b0c70abbdc670507712f50fe2b29e
- 324eabc27a25f524c94bb62573986b3335ab5181ddc6825d959d16aaaccdc7aa
- 9547933dd46501af7fc095a3513e48b81178e344b86e075b679259875f0fd5a7
- af90666822646e35eb52248f4a89eb715ce9f44459205bc24827a2aafe053548
- 058a1dbfa03cac6cc67d34a4dcc69445
- 10938c2d01dc999d2fe1f8c635e3705e7e663077935a17e730c849d1191c76ed
- caef2db273f466df3e2fa8c61bca6f9d58c99057
- cd5e7b3b59cea14b804f6c01821d1ab94a0046422fe956f623b238c5db0cac99
- 84c7bfb0e243dd99b674e48701acab6b
- fbd67a3bcc964e370931f620a85bf368d7b5797ebc1d53fe3be11a89a90e7961
- 213afdbedfd181f4ff5bc831cbf22595648694a7
- 56eec59a5fe3f5a3c2c836701557bf1956770f465cd9e049995b86aef76a3e39
- 590e47944ef0597bf1ff1d41656859b776e7031a4611cbf22d619002cbe49312
- 97524f4c582e0fbe46b74a7cfe4db9f078f368520cda25f27a50c5d2c50161f9
- 5b992a3438e344dddcdd66151a40efb3452b2ff37cdc40b37db612afeb29ed29
- bc8cc3ca2a45ebb934cd71218d9b56b3
- b61ae633616d7dd29aaf0b170fdfbe8f282c0f8bdcb1c52aedee473ce4bf5789
- 507eae5d91a3e0ad47130b5103e35e1d621163e5
- e2622ede1ebe5a37c439a32f0c63c13f893d1e5513b27367502898651cc5464b
- 110df49522d46b612a28bafbdff3405c
- 0ccd3f2d7e6637eaf5414e35b97d9d8bf6b8e4182859cace8ca8e02377a4e62a
- 4b4d6e2ffbbc2f2e13202125cbff097b2eedd654
- 780e34c72404fd464669626ae554b81393d2bae95293284b375bb5d989914486
- 972b1677621bbdc45ef61c56cd9909d2
- dacbba7f18d0835deb2eeb4e4d82c8f57234767291a90da1a5f3fd02d6bc13c2
- afa5c27726efe4576e1161c0c17f83524a447c4f
- 008ec0226066572f4b27f100d08443120b9dd55cefbec2bbff994b5b552e546c
- 9323fca75a86c75ffbdcc88ed8f35e5a
- a6a397fec6c109a1402c6f1144d647843b2093f65fedd27204b40ebeea0640b6
- 00005ed250d85fc47e4c3883b8e6179a9888b8140acfeb94a40edc36bd523adb
- 4f935fd188b1e9965e083f72ec33712dae53409a
- b7796a3b1812f329c43d5d37bbb6d8032b7bc06b15af29f555eb3e0c7b1b1c3d
- 425b2f283b71237276f84d941d9c2982c7f61a9aff12ece10e15065b73b7165e
- b211537ea626fae4ad2ef5ee2652633dc68aaf20da6eb953a44f266c4106b367
- 7170292337a894ce9a58f5b2176dfefc
- 11affbeb18f4d6edcc9a4be5a82f8e23dfc31178887e97119faa5ddc75990494
- 3c8d106f63d1ed921f9b8c7d103d73cd591fe19c
- 9cd62dbace3324487124787127cff7c63a9f005d8d3aff9bac28c437e5caefc7
- 9600db537e27db88ed2eca3be0ffab35cdb22a86a6dbb048d8deaf8f56944822
- ba8291a7d062dcfcdf824399b42eef9f
- 406e6065cac225b47784fb07230962e28abbb6fa
- 67e7b0bf057c8c7ef117be16a168833235920d0af16921ff59d0866f0d05e050
- 16b4f2af4cd1d1e1fd2089d0c0697534
- 3857744a651da4e431083180798041a5e888b09334a1a04c2c047216f471b0f6
- dbc6750d065d4ab641877b630cc7f59866c91183
- 9c58050d0fb79c4863ae6df6aa661d9e
- 2aae1d749353067f5afb5bebedb5249047f60e7aaa9684ac7c779a0908b1573c
- 789c2008899fae1ef90205c72d15dc04803baa1c
- d924b7a24bce868e7b09441269d2925b
- 7ade4d9ca56ead7ff98ff42935313dcb0558f238
- ae57e4be3ebcf78d4f569a3b7875c287d70f7d45876fcaaaebe3f5ca58cce600
- 08b7c181fa4f234e3b3ad8a0e36c613b
- 5f1c145a4ecdc81be42ab7302324eea0
- afd41a672f348abb8dabc8a493a0ffa1199019ead9b0bd92cb327d4bbfe97771
- 726eaefe82c0c415dc34bc6473fc60f335c1fedc
- bbdd594b564452ed2c5a88a0a587f1a0
- 9a8e23b068860e3a643fffdf2164f98b75b63439466cb68feaf61a554df75fe8
- 932cdd30d33a9c30a7cad1f9f109113daf9814c9
- 408258ce7d4136a77b3e871708d56cf0
- d888ec89be375ac3547cc265de51929ca87c78894241110810ea99b91863488f
- cd00de71ec391b8a66a1a73fc85c1beb2f69cb06
- 7440e0323df806c324ebcc97306687db
- d8f6dad64c78b9767d8c2004c05bce64d30d8d268276dfff4adab45781e6fe1c
- b5b6ca51a18389e8d0fb624bd0d876041b5cdfa9
- faa90497b67d61e5462e5a76c73f8eda
- 06dc0dc2633650beab0dcf965322f86c7b25bc0509b812ce1cad7af30b653237
- 3c9b0cdf32d4fcd28fffd844e0a0a95f8ab1cba6
- b47b56767c679faea7c9217d2b95f91a
- 486626fb3b020f3b29adb002a38ae012d200f27d
- 6a09fbe1e2adf9ebd54ebfd30a5cd9e480442958b32a60cc13d615858ba05b11
- 4437ab9c5db3c5ebb9235b4adade504153fa39ca5774ac8c6145a0b7c97a97eb
- ed5471d42bef6b32253e9c1aba49b01b8282fd096ad0957abcf1a1e27e8f7551
- 2db8cce5bb24a768a7a60c28e46b8b1e1655fc5f
- 22d892ee990b3d75e3fff497b75667dd
- 5a8ee329d61b780b5bc4a0fd791bfbbbe12761bf
- ca4774896299849f60e781deb86a5260
- 42a7d5522eab6a2642d58a8b34f9960f1b853c45
- 418535ad791f7400aed8a99a9ee65b835b1f6f10b9e179cf66ff19328d2b7616
- 8fbacedb88c87c8e7f6b51c14190c1a83bf92ffa19d0a15042128309087bbbc0
- be1042780f58defe9ecf539b5481fd35
- 69d136f41dbd3b456a8a632ff2bc4264f67f210f
- 6d5c0b86c364727c28a83d19831de33b
- 64099033d2afd49fb9c20a93e6889ad1b0403935
- 64358eea004eb220125606e2e9fad720ded149e5a11fbbcf051ae014b0dc5284
- 1f0a3bcbf7a0f36352d813147e4f00ed
- f15d83fce8c42d428cea357016f70de31011e72a
- 0a841a35192eb9e68c96bcd0ade27737fde48cfab44f5b7a16dfa91640638a62
- 780e48f9d8ffb206e37e757774e5c322
- 76c1c46543a19f233bd0d27d160a3cb04c9594dc
- 9d31e9cd075b60f78412e04ecbe9959609f9c6f0ed6d86fdf10de76265c6b74f
- 4ba4571394155d03aa4724a719bd9da8
- 6a3d48a7216091a5cede71f23d6dfccc7c04a7fa
- f438f0efb932ce311f40895b7c87588e2b78d0ac33c12eeab5f9b84582fbb771
- 40a0062e4b74e39c2514ec4353f1ed97
- 4d5a2e2bc56e72f4567cf9949d76338c09d0be7a
- 1796b3737c06e78f1032a887a22bd696eb86e802d6a2fa36912b7bd7506de5e9
- ffc995a587ee833d43f961ba41f76221
- 3a93df783b214781323914d2f76e370c5c491243
- 13905abcca2603e0cece0b6bb88edb4eee9c6dec6be1530816f181a203ed23c4
- 49c5969329af26a979fcfb02b6dc217a
- 8d6dc43dc01b4d72cedb402480e87ee7cf9801b0
- e26fe1800d32f788a46c5b3edb127305fe94d3fb3f3c0f7c5290ec19967c485c
- 2beb77a136a04cac322a7cbf0591ceca
- 44759e4967111edcfdda38577df71791c78deb8c
- 1fe0ef3e1f4d71269926a0f210bbd30beaca8426e248231d5a35718cbbdaa599
- f8b4737bbcb0a5024906390766a8f50d
- 53d97548311f1b28615be932d12b325d82121d2d
- cfbfe178a9c6265a71677ebd3200ed7c3b181debe55f5018b5f5712789db6a31
- 8275b3a779ec7bd168a9f9037b756b28
- f7c61e0b51013153997decf6cd7530e52d08c283
- db5986b152dd416d0faa99c656125a2b700c9bc6eb5845a297645990c2d392b5
- 4cd5745bb703073c1508dc938f5e4d10
- 139462ee6d2e0659ac8c7401786df635451fb33a
- 405c8d8a3d501137041eea20770609d770772310cc7de80ca251337f7b48321e
- ccb31e8f117d2e2977f06b1c056041d1
- 7e6bd21258869ed89dad48741f7367894b135db2
- c25cfcf781df36654f6e9631c733f5cdf7d4d8220bcd692e49a012602f6e65ac
- 15e513db9d43b69e2fc5696051e63704
- 5cade9887101df15c48b8d124682b7fb49a2ce77
- 07fc59495476721342fa3045c08a46b9edc7f4b56f912000d59e385bdf8fada2
- 38328b947fb2db01e173db83d51b6177
- 790c05d71835a5a1d4ce0f6bf47c5b5f0bac98f2
- 45e46b26da8e9c47f289f2a4a1cb413b8ffc31c69ec24a1b61942e5a169410c2
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for BQTLock
Other
T1486
T1486
T1490
T1490
T1021
T1021
T1562
T1562
T1080
T1080
T1078
T1078
T1547
T1547
T1059
T1059
T1021.001
T1021.001
T1105
T1105
T1071.001
T1071.001
Victims(8)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Metro Hospital USA | United States | Negotiating | 6 months ago | |
| DGM | Israel | Claimed | 9 months ago | |
| Morning Desert Safari | United Arab Emirates | Claimed | 10 months ago | |
| Arabian Desert Safari | United Arab Emirates | Claimed | 10 months ago | |
| Dhow Cruise Dubai Harbour | United Arab Emirates | Claimed | 10 months ago | |
| Hatta Heritage Village | United Arab Emirates | Claimed | 10 months ago | |
| Adore UAE | United Arab Emirates | Claimed | 12 months ago | |
| EPS FUJ Private School UAE | United Arab Emirates | Claimed | 12 months ago |
Affected countries(16)
Countries where this group has been reported to target or leak victims.