Einpresswire

BQTLock and GREENBLOOD Ransomware Cause Significant Business Disruption

First seen 11 Feb 2026, 19:30 UTC • Reddit

•47.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

BQTLock and GREENBLOOD are newly identified ransomware threats that have emerged, targeting businesses for rapid disruption. BQTLock employs stealth techniques, including credential theft and screen capture, while GREENBLOOD utilizes Go-based encryption for swift operational impact. Both ransomware types pose risks of data breaches alongside their primary ransomware functions.

How this analysis works

Timeline

2026-02-11

ANY.RUN releases findings on BQTLock and GREENBLOOD

2026-02-11

BQTLock identified as stealth-focused ransomware

2026-02-11

GREENBLOOD reported to disrupt operations in minutes

Attack Flow

13 entities, 18 inferred relationships (STIX 2.1).

Technique (8)

Data Breach
Ransomware
T1003 - OS Credential Dumping
T1041 - Exfiltration Over C2 Channel
T1055 - Process Injection
T1070 - Indicator Removal
T1113 - Screen Capture
T1486 - Data Encrypted for Impact

Malware (1)

Remcos

Affected Platform (1)

Windows

Threat Actor (2)

BQTLock
Greenblood

Tool (1)

Fodhelper.exe

Relationships

BQTLock uses Remcos
Greenblood uses Remcos
BQTLock uses Fodhelper.exe
Greenblood uses Fodhelper.exe
BQTLock uses Data Breach
BQTLock uses Ransomware
BQTLock uses T1003 - OS Credential Dumping
BQTLock uses T1041 - Exfiltration Over C2 Channel
BQTLock uses T1055 - Process Injection
Greenblood uses Data Breach
Greenblood uses Ransomware
Greenblood uses T1003 - OS Credential Dumping
Greenblood uses T1041 - Exfiltration Over C2 Channel
Greenblood uses T1055 - Process Injection
BQTLock related to T1070 - Indicator Removal
BQTLock related to T1113 - Screen Capture
BQTLock related to T1486 - Data Encrypted for Impact
BQTLock related to Windows

Continue Reading

Russian UAT-11795 Targets Users with Trojans in Legitimate Software VHDX Files Exploited to Deploy Remcos RAT via Multi-Stage Attack Formbook Malware Campaign Targets Organizations with Advanced Phishing Techniques New Remcos RAT Campaign Exploits CVE-2017-11882 via Phishing Cruciferra Crypter Service Powers Multiple Cybercrime Campaigns SmartApeSG Campaign Distributes Multiple RATs via ClickFix Technique

BQTLock and GREENBLOOD Ransomware Cause Significant Business Disruption

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading