RansomwareUnknown
Bqtlock
Bqtlock is a ransomware group, tracked by Brandefense. It targets 3 sectors, including Education and Research, and Healthcare, in 4 countries, including India and Israel.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Last seen
- Apr 6, 2026
- Record updated
Who They Target.
Vulnerabilities Linked To Their Tools.
Browse Vulnerability Intelligence →CVE-2024-4577PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution.ExploitedcriticalCVE-2017-0199Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files.ExploitedhighCVE-2024-43451Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation.Exploitedmedium
Arsenal · Malware And Tools.
- RemcosRATmalware
About Bqtlock.
BQTLock is a ransomware-as-a-service operation that emerged in 2025, using AES-256/RSA-4096 encryption with Monero payment demands, linked to pro-Palestinian hacktivist networks and targeting organizations with wave-based campaigns with 48-hour ransom deadlines.
Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.