bluelocker Ransomware
Tracked since Aug 19, 2025
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Blue Locker targets Pakistan’s vital energy sector, particularly Pakistan Petroleum
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Tactics and techniques (MITRE ATT&CK)
Persistence
T1547.001 Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder Privilege Escalation
T1543 Create or Modify System ProcessT1548.002 Abuse Elevation Control Mechanism: Bypass User Account Control Defense Evasion
T1070.006 Indicator Removal: TimestompT1140 Deobfuscate/Decode Files or InformationT1562.001 Impair Defenses: Disable or Modify Tools Discovery
T1012 Query RegistryT1057 Process DiscoveryT1083 File and Directory DiscoveryT1087 Account DiscoveryT1497 Virtualization/Sandbox Evasion Collection
T1056 Input CaptureT1074 Data Staged Impact
T1489 Service StopT1490 Inhibit System Recovery Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live