Loading threat actor…
The Bishnoi Gang is a transnational organized crime network centered on Lawrence Bishnoi and associated operatives, widely alleged by law-enforcement authorities to have expanded from India into an international criminal enterprise spanning North America, Europe, and other diaspora-linked geographies. The group has been associated with extortion, intimidation, violence, contract killings, narcotics trafficking, firearms smuggling, and money laundering. Canada has designated the Bishnoi Gang as a terrorist entity, citing a campaign of violence, intimidation, and extortion targeting South Asian diaspora communities. Authorities have alleged that the network targeted members of the Indian and broader South Asian diaspora, including business owners pressured for protection payments and retaliatory violence against those who refused. Investigations in the United States and Canada have also linked the group to organized targeted killings, including allegations concerning the 2023 killing of Hardeep Singh Nijjar in Canada. The network has been described as recruiting operatives across multiple countries and exploiting international logistics and diaspora connections to support criminal activity. Lawrence Bishnoi has reportedly remained in Indian custody since 2015, yet investigators have alleged that he continued directing operations from prison through smuggled communications devices, encrypted messaging, and trusted intermediaries. This indicates a command-and-control model resilient to incarceration and reliant on compartmented intermediaries. Reported tradecraft and behaviors include extortion-driven coercion, cross-border criminal coordination, use of encrypted communications for operational security, and post-offense intimidation. Known aliases include Bishnoi and Bishnoi Gang. The actor is best characterized as a transnational criminal and extortion network rather than a state-sponsored espionage actor. High-confidence reporting supports financially motivated organized crime activity with violent enforcement mechanisms and international reach.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
3 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A transnational organized crime syndicate allegedly directed by Lawrence Bishnoi and associates, involved in extortion, drug trafficking, firearms smuggling, money laundering, contract killings, and intimidation of diaspora communities across multiple countries.
Alleged association with extortion-linked networks connected to the B.C. probe, indicating a transnational criminal dimension relevant to deportation and enforcement cases.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.