QWCrypt Locker is a ransomware family that, according to the articles, is being used by the GOLD BLADE group via a custom version.
QWCrypt Locker is a ransomware family that, according to the articles, is being used by the GOLD BLADE group via a custom version. This tool enables data exfiltration in addition to ransomware deployment, indicating a dual-extortion capability and evolving threat tactics in the ransomware landscape.
Between February 2024 and August 2025, Sophos threat analysts identified nearly 40 intrusions linked to the GOLD BLADE ransomware campaign. This campaign utilizes a custom QWCrypt locker for data exfiltration and…