Pakistan’s key ministries and state institutions are facing a major cyber threat from the dangerous “Bulock ransomware.”

The Director General of the National Cyber Emergency Response Team (National CERT) has alerted 39 ministries and institutions about the severe risk posed by ongoing ransomware attacks.

In an official letter, top government bodies — including the Cabinet Division, Interior Ministry, Foreign Affairs Ministry, FBR, Election Commission, and PEMRA — were warned of the possible consequences.

According to the advisory, the attack could lead to permanent data loss, disruption of operations, and leakage of classified information. The ransomware specifically targets Windows-based desktops, laptops, servers, cloud storage, and connected networks.

Nature of the bullock ransomware threat

The “Bullock ransomware” works by locking files and demanding payment for their release. National CERT emphasized that the current wave of attacks is highly sophisticated and dangerous.

The advisory instructed all departments to:

Avoid downloading files from unverified sources
Refrain from clicking on suspicious links or attachments
Provide immediate staff training to identify phishing attempts
Disconnect infected systems from networks immediately
Report any incidents to National CERT without delay

High-priority government targets

The warning was sent to critical departments including the National Information Technology Board (NITB), National Disaster Management Authority (NDMA), Oil and Gas Regulatory Authority (OGRA), and the Finance Ministry.

The National CERT urged that the advisory be shared with all relevant stakeholders to prevent potential large-scale disruption.