About
Written by ThreatCluster from 7 storiesDeadLock is a ransomware group that operates with a decentralized, blockchain-based infrastructure and does not follow the traditional double extortion model; its notable tradecraft includes using Polygon smart contracts to store proxy addresses and a decentralized recovery chat that integrates the Polygon blockchain with the Session messenger, while its Rust-based encryptor disables security and backup services, clears event logs, and times activity to prolong impact. ThreatCluster records more than 100 victims attributed to DeadLock, with the most-targeted sectors including Business Services, Manufacturing, Technology, Financial Services, and Healthcare, and observed activity across IT, ES, PL, TR, and the US. Recent reporting shows a pattern of blockchain-based evasion and decentralized infrastructure to manage proxy addresses and enable stealthy operation, illustrated by the August 2026 report describing DeadLock's decentralized recovery infrastructure via Polygon and the Session messenger.
Sectors: Business Services, Manufacturing, Financial Services · Countries: IT, ES, PL
Recent victims
View all →| Victim | Sector | Country | Data | Files | Posted | Status |
|---|---|---|---|---|---|---|
| SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA | Professional Services | US | — | — | Aug 24, 2026 | |
| FBC fbcweb.furnbed.co.za |
furniture, mattress and upholstery industry | South Africa | — | 1 | Aug 24, 2026 | countdown |
| JP Molyneux Studio molyneuxstudio.com |
Interior design | GB | 700GB | — | Aug 20, 2026 | published |
| UFOC ufoc.com.tw |
Telecommunications | Taiwan | 470gb | — | Aug 19, 2026 | published |
| Global Terminal Services globalterminal-tr.com |
Logistics | TR | 470gb | — | Aug 19, 2026 | published |
| LT Group / Fortune Tobacco Corp | Tobacco | PH | Amount: 27 GB | Files: 14,836 | — | Aug 10, 2026 | published |
| AHENK lab ahenklab.com.tr |
Healthcare | Turkey | — | — | Jul 28, 2026 | published |
| DIATER diater.com |
Biopharmaceuticals/Healthcare | Spain | — | — | Jul 28, 2026 | published |
| Pasello data-pasello.com |
Metallurgy/heat treatment | Italy | — | — | Jul 28, 2026 | published |
| Takis srl | Biotech/Pharmaceuticals | Italy | — | — | Jul 28, 2026 | published |
| Hardware Asesorias Software Ltda | Technology | CL | — | — | Jul 27, 2026 | |
| Tesco Engineer | Retail & E-Commerce | GB | — | — | Jul 27, 2026 | |
| High Class Car Limo | Transportation | US | — | — | Jul 26, 2026 | |
| West African Resources ltd | Energy & Utilities | AU | — | — | Jul 26, 2026 | |
| Caspian One | Energy & Utilities | AZ | — | — | Jul 26, 2026 | |
| Schaad, Balass, Menzl and Partner AG | Professional Services | CH | — | — | Jul 25, 2026 | |
| HİDROMEK | Manufacturing | TR | — | — | Jul 25, 2026 | |
| KEMEK | Manufacturing | — | — | Jul 25, 2026 | ||
| KeNHA | Government & Defense | KE | — | — | Jul 25, 2026 | |
| BioResearch | Healthcare | PL | — | — | Jul 25, 2026 | |
| Relesa | Other | AR | — | — | Jul 25, 2026 | |
| Carrier AB | Manufacturing | SE | — | — | Jul 25, 2026 | |
| Enedo Power | Energy & Utilities | FI | — | — | Jul 25, 2026 | |
| CNA | Financial Services | IT | — | — | Jul 25, 2026 | |
| Vinilon | Manufacturing | CL | — | — | Jul 25, 2026 |
Found by ThreatCluster
15 total from our crawlListed on this group's leak site and not present in the aggregated feeds.