Loading threat actor…
The Baloch Liberation Army (BLA) is a Pakistan-based Baloch separatist militant and insurgent organization active primarily in Balochistan. It is one of the most organized and lethal Baloch insurgent groups and has evolved from a largely rural tribal insurgency into a more modern guerrilla movement with specialized units and an expanding operational tempo. The group claims attacks against Pakistani security forces, police, transportation infrastructure, and projects associated with foreign investment, particularly Chinese-linked economic activity in Balochistan. Reported BLA operations include coordinated attacks across multiple districts, attacks on trains and railway infrastructure, assaults on security convoys and police positions, and suicide operations. The organization is associated with tactical adaptation and increasing operational sophistication. Reported capabilities include the use of vehicle-borne suicide attacks, coordinated multi-location operations, reconnaissance and attack support using commercially available drones, and a dedicated drone unit identified as the Qazi Aero Hive Rangers. The group also uses propaganda and media products across social platforms to recruit, shape narratives, and raise support. Women have reportedly taken increasingly direct operational roles within the insurgency, including as commanders, frontline fighters, and suicide bombers. The BLA operates within the broader Baloch separatist insurgency and has been linked in reporting to cooperation or alignment with other militant actors in the region, including Tehreek-e-Taliban Pakistan. Its violence is concentrated in Pakistan, especially Balochistan, where it targets state security presence and infrastructure tied to the Pakistani state and foreign economic interests. The group’s dominant motivation is separatist and political rather than financial, but within the available taxonomy it aligns most closely with terrorism-driven destructive violence.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Conducting separatist insurgent and terrorist attacks in Balochistan, including attacks on trains, railway infrastructure, security convoys, and police stations, while expanding operational capabilities through drone warfare, propaganda, and broader recruitment including women in frontline roles.
Conducted coordinated attacks across roughly a dozen districts in Balochistan, Pakistan.
Baloch separatist militant group active in Balochistan, targeting projects associated with China and involved in broader separatist violence in Pakistan. The content also states it has aligned with TTP and expressed support for Israeli-U.S. strikes on Iran.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.