Skip to content
DeadLock Ransomware Exploits Smart Contracts for Malicious Activities

DeadLock Ransomware Exploits Smart Contracts for Malicious Activities

First seen 15 Jan 2026, 18:00 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

DeadLock is a ransomware family identified in July 2025, notable for its unique approach of utilizing Polygon smart contracts for proxy address storage. This method allows the ransomware to operate stealthily, impacting various targets without being linked to any known affiliate programs.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 198d ago How this analysis works

More articles in this cluster (9)

Following this threat?

Track DeadLock and Polygon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed