interlock

Interlock is a ransomware group that operates an extortion-based model and has been observed leveraging initial access brokers and a range of downloaders and crypters to stage campaigns. Victims span Education, Manufacturing, Healthcare, Public Sector, and Construction sectors, with the US, Canada, Australia, the United Kingdom, and Italy most often affected; 112 victims have been claimed. A pattern across the reporting shows Interlock exploiting a shared malware ecosystem and relying on initial access brokers to gain entry, with healthcare-sector incidents illustrating data theft and disruption; for example, the May 2025 attack on Kettering Health disrupted patient care and has led to 44 lawsuits consolidated into a single complaint.

Sectors: Education, Manufacturing, Healthcare · Countries: US, CA, AU