GOLD Blade Ransomware — Victims, Campaigns & Activity

Related Threat Clusters

• GOLD BLADE Ransomware Campaign Using QWCrypt Locker Identified

  Between February 2024 and August 2025, Sophos threat analysts identified nearly 40 intrusions linked to the GOLD BLADE ransomware campaign. This campaign utilizes a custom QWCrypt locker for data exfiltration and…

  3 articles · Updated December 9, 2025
• Lessons from 2026 Cyber Attacks: Insights for Business Leaders

  In February 2026, Sophos X-Ops analyzed 661 cyber incidents, providing insights for businesses on mitigating risks. The findings emphasize the impact of ransomware and other cyber threats on organizations. The analysis…

  2 articles · Updated February 26, 2026

Recent Intelligence Reports

• Stopping Real-World Attacks: Lessons from the Cyber Frontlines — Youtube · February 26, 2026
• GOLD BLADE Using Custom QWCrypt Locker that Allows Data Exfiltration and Ransomware Deployment — Cybersecuritynews · December 9, 2025
• GOLD BLADE Exploiting Custom QWCrypt Locker for Data Exfiltration and Ransomware Deployment — Cyberpress · December 9, 2025

Related Entities