Threat Actor Characterization
You’re viewing the read-only version.
Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
Karim Fayad
ID: 110e93cdd76c508e6ce84824ce2b3b8d68658
Cybercrime
Cybercriminal
Threat types: Malware, Hacktivism, Cybercrime, Intrusion
Progress: 55%
Completeness: 48%
Freshness: 70%
Operation zone: Israel, United States
Aliases
Limited alias preview
No aliases registered.
Actor Network Graph
Open Network GraphPreliminary Intelligence — Karim Fayad
Classification: TLP:WHITE – Individual profile (preliminary, contested attribution)
Author: iQBlack Team
Analyst note: This profile treats “Karim Fayad” as a real-world identity that multiple OSINT sources associate with the online persona ZeroDayX / ZeroDayX1 and the BQTLock ecosystem. The linkage is heavily reported but not judicially confirmed, and the actor has previously denied it.
Executive Summary
Who (reported):
Public reporting by Alma Research, DOS-OP and others describes Karim Fayad as a Lebanese computer and communications engineering student at the American University of Beirut (AUB), expected to graduate around 2026, who simultaneously acts as the leader/operator of the BQT.Lock (BaqiyatLock) ransomware group and a Hezbollah-aligned cyber operative.
Executive brief
now
Saved successfully.
Hunting Playbook
now
Saved successfully.
IOC Appendix
now
Saved successfully.
OSINT Library
now
Saved successfully.