Skip to content
DeadLock Ransomware Employs Blockchain for Evasion Tactics

DeadLock Ransomware Employs Blockchain for Evasion Tactics

First seen 14 Jan 2026, 17:51 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

The DeadLock ransomware operation, first identified in July 2025, utilizes blockchain-based smart contracts to evade detection and manage proxy server addresses. This group has targeted various organizations while maintaining a low profile and does not follow the traditional double extortion model. Researchers from Group-IB highlight the innovative technical methods employed by DeadLock, which may influence future ransomware tactics.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 184d ago How this analysis works

More articles in this cluster (9)

Following this threat?

Track DeadLock and Polygon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed