DeadLock Ransomware Utilizes Decentralized Recovery Infrastructure

• •DeadLock ransomware employs decentralized infrastructure for victim communication.
• •The Rust-based encryptor disables security measures and manages system performance.
• •Victims face double extortion tactics, increasing pressure to pay ransoms.

DeadLock ransomware has emerged as a significant threat, employing a decentralized recovery chat that integrates the Polygon blockchain and the Session messenger. This ransomware utilizes a Rust-based encryptor that disables security and backup services, clears event logs, and carefully manages its activity to prolong system usability. Victims are subjected to double extortion tactics, where their data is not only encrypted but also threatened with public release. Microsoft has identified this operation as financially motivated, highlighting its sophisticated infrastructure for victim communication and negotiation. The current status indicates ongoing threats to organizations, with no specific numbers on affected systems provided in the articles. The use of decentralized technologies marks a notable evolution in ransomware tactics, complicating recovery efforts for victims.