Skip to main content
Mallory
Back to threat actors
🇵🇰 PK

Baloch Liberation Army

Also known asbaloch_liberation_army

The Baloch Liberation Army (BLA) is a Baloch separatist militant group active in Pakistan’s Balochistan province. The provided content describes it as South Asia’s most organized and lethal insurgent group and says it has evolved from a remote tribal insurgency into a modern urban guerrilla movement with several specialized units. It has claimed responsibility for major attacks, including a suicide vehicle bombing against a passenger train in Quetta that killed at least 30 people and injured more than 50, and it reportedly conducted simultaneous attacks across around a dozen districts in Balochistan. Based on the content, the BLA targets Pakistani security forces and infrastructure and is also linked to attacks intended to signal that Chinese investments and projects in Balochistan are unsafe. The content states that Chinese investments and other foreign-linked mining and infrastructure activity in Balochistan have been targeted by separatist militants led by the BLA. The group is described as part of a broader escalation in separatist violence involving attacks on trains, railway infrastructure, train-clearing units, security convoys, and police stations. The content attributes tactical innovation and growing capability to Baloch separatist groups including the BLA. It specifically states that in March 2026 the BLA announced a drone unit called the Qazi Aero Hive Rangers, and that Baloch separatists are moving toward use of commercially available quadcopters, first-person-view drones, and industrial drones for attack and reconnaissance. The content also states that U.S.-origin weapons left behind in Afghanistan, including M4 carbines with thermal scopes and M16 rifles, have reached local militant networks through black markets. The content further states that women now serve in direct operational roles in the Baloch insurgency, including as commanders, frontline fighters, and suicide bombers, and that the BLA released a video showing female commander Shaynaz Baloch and her fighters training at a shooting range in Balochistan. It also says Baloch separatist groups use social media and propaganda products including infographics, blogs, magazines, documentaries, poetry, and songs for recruitment, traction, and fundraising. In the regional threat picture described in the content, the BLA operates in an environment shaped by cross-border dynamics involving Iran and Afghanistan, illicit smuggling economies, and competition around critical minerals and major projects such as Saindak and Reko Diq. The content also states that the BLA has an alliance with Tehreek-e-Taliban Pakistan and that some separatist groups including the BLA have expressed support for Israeli-U.S. strikes on Iran. Known alias in the provided content: BLA.

Share:
Are they targeting you?

Know when an actor pivots toward your sector

Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.

OPERATIONAL PROFILE

Targeting

Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.

Who they target

Sectors the actor has been observed targeting.

  • Transportation
  • Government & Administration
  • Military

Where they target

Geographies tied to known operations.

  • 🇵🇰 Pakistan
  • 🇨🇳 China

Where they're from

Attributed origin per open-source reporting.

  • PK
What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: sector and geo overlap with your footprint, the IOCs they’re burning right now, detection coverage, and what to do next.
Target overlap

Match sector + geo + tech-stack targeting against your real footprint.

Tradecraft mapping

Every observed MITRE ATT&CK technique, grouped by tactic.

Malware arsenal

Families this actor is known to deploy, with IOCs and behavior.

Exploited CVEs

CVEs this actor has used in known campaigns.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Observables

Domains, IPs, and hashes tied to this actor, refreshed continuously.