Dark Web Profile: Blue Locker Ransomware

Blue Locker Ransomware: a detailed threat actor profile describing a ransomware group first observed in 2021 that resurfaced with a high-impact August 6, 2025 attack against Pakistan Petroleum Limited; the report documents the group's double-extortion tradecraft (data theft, shadow copy deletion, encryption), reconnaissance and persistence techniques, potential links to the Proton ransomware family or to the open-source MemeCryptor codebase, false-flag artifacts, MITRE TTP mappings, and consolidated IOCs (file hashes, domains, and IPs) for defenders.