DeadLock
(Active)
Description
This is an emerging and active group. Data will be added as it's discovered.
Ransomware Type
Crypto-Ransomware
Data Broker
First Seen
Extortion Links
Medium
Link
Clearnet
https://deadlock.liveblog365.com
Ransom Note
RECOVERY_CHAT.<Victim ID>.html
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Communication
Medium
Identifier
Session Messenger
05b0c8da191a5b3c41105fa034a31784c6d595c49655f232e10e06277ee145c07c
Session Messenger
05084f9b14b02f4ffa97795a60ab1fafaf5128e3259c75459aaaeaebc80c14da78
Encryption
Type
Symmetric
Files
Custom Stream Cipher
File Extensions
Type
File Extension
Append
.dlock
Ransom Note Name
HOW_RECOVER.<Victim ID>.txt
RECOVERY_CHAT.<Victim ID>.html
Samples (SHA-256)(8)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 Victims(77)
| Industry Sector | Country | Extortion Date | Amount (USD) |
|---|---|---|---|
| Individual | Unknown | ||
| Construction & Home Improvement | Hungary | ||
| Accounting Services | United States | ||
| Transportation, Distribution & Logistics | Argentina | ||
| Government | United States | ||
| Banking & Finance | Italy | ||
| Automotive | Mexico | ||
| Engineering Services | Germany | ||
| Memberships & Unions | Uruguay | ||
| Healthcare & Medicine | United States | ||
| IT Consulting | Canada | ||
| Manufacturing | Türkiye | ||
| Museums & Historical Sites | India | ||
| Beauty & Cosmetology | Argentina | ||
| Scientific Services | Argentina | ||
| Chemical | Brazil | ||
| Government | Czechia | ||
| Charity & Nonprofits | Spain | ||
| Manufacturing | Italy | ||
| Animal Production & Vet Services | Germany | ||
| Real Estate & Housing | Portugal | ||
| Beauty & Cosmetology | Spain | ||
| Professional Services | Spain | ||
| Fashion & Textiles | Türkiye | ||
| Manufacturing | Türkiye | ||
| Conglomerate | Mexico | ||
| Manufacturing | Italy | ||
| Waste Management | Croatia | ||
| Waste Management | Croatia | ||
| Real Estate & Housing | Netherlands | ||
| Manufacturing | Italy | ||
| Hospitality & Leisure | Spain | ||
| Manufacturing | Spain | ||
| Fashion & Textiles | Romania | ||
| Professional Services | Spain | ||
| Professional Services | Spain | ||
| Professional Services | Sweden | ||
| Manufacturing | Lithuania | ||
| Government | Papua New Guinea | ||
| Government | Spain | ||
| Electronics & Robotics | Taiwan | ||
| Accounting Services | France | ||
| Engineering Services | Denmark | ||
| Manufacturing | United Kingdom | ||
| Manufacturing | Poland | ||
| Manufacturing | Poland | ||
| Conglomerate | Angola | ||
| Human Resources & Staffing | Portugal | ||
| Food & Beverage | Switzerland | ||
| Information Technology | Poland | ||
| Security & Cybersecurity | Poland | ||
| Paper & Printing | Poland | ||
| Engineering Services | Poland | ||
| Engineering Services | Poland | ||
| Energy | Germany | ||
| Environmental Services | Italy | ||
| Environmental Services | Italy | ||
| IT Consulting | Italy | ||
| Engineering Services | Norway | ||
| Engineering Services | Poland | ||
| Construction & Home Improvement | Czechia | ||
| Engineering Services | Spain | ||
| Engineering Services | Spain | ||
| Automotive | Spain | ||
| Education | Hungary | ||
| Museums & Historical Sites | Czechia | ||
| Transportation, Distribution & Logistics | Bulgaria | ||
| Transportation, Distribution & Logistics | Italy | ||
| Architectural Services | Singapore | ||
| Banking & Finance | Gabon | ||
| Oil & Gas | Italy | ||
| Real Estate & Housing | Spain | ||
| Transportation, Distribution & Logistics | Italy | ||
| Manufacturing | Türkiye | ||
| Manufacturing | Türkiye | ||
| Professional Services | Brazil | ||
| Banking & Finance | Nigeria |
References & Publications
BleepingComputer Forums: Deadlock Ransomware ([random 6 char].dlock; same [random 6].<ransomnote>.txt)
Cisco Talos: New BYOVD loader behind DeadLock ransomware attack