DeadLock Ransomware Employs Blockchain for Evasion Tactics

The DeadLock ransomware operation, first identified in July 2025, utilizes blockchain-based smart contracts to evade detection and manage proxy server addresses. This group has targeted various organizations while maintaining a low profile and does not follow the traditional double extortion model. Researchers from Group-IB highlight the innovative technical methods employed by DeadLock, which may influence future ransomware tactics.