Blue Locker is a ransomware operation that encrypts victim files and demands payment for decryption, first publicly observed in October 2021. While its primary motivation is financial extortion, recent activity suggests a possible connection to nation-state interests, particularly concerning attacks against critical infrastructure. The group employs double extortion tactics, exfiltrating sensitive data in addition to encrypting it, to pressure victims into paying. Blue Locker is recognized for its use of a PowerShell-based loader to disable security defenses and its advanced evasion techniques, such as obfuscation of target strings to bypass detection. It has also been referred to as BlueCryptor.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker