About
Written by ThreatCluster from 6 storiesDeadLock is a ransomware group that operates with a decentralized, blockchain-based infrastructure and does not follow the traditional double extortion model; its notable tradecraft includes using Polygon smart contracts to store proxy addresses and a decentralized recovery chat that integrates the Polygon blockchain with the Session messenger, while its Rust-based encryptor disables security and backup services, clears event logs, and times activity to prolong impact. ThreatCluster records more than 100 victims attributed to DeadLock, with the most-targeted sectors including Business Services, Manufacturing, Technology, Financial Services, and Healthcare, and observed activity across IT, ES, PL, TR, and the US. Recent reporting shows a pattern of blockchain-based evasion and decentralized infrastructure to manage proxy addresses and enable stealthy operation, illustrated by the August 2026 report describing DeadLock's decentralized recovery infrastructure via Polygon and the Session messenger.
Sectors: Business Services, Manufacturing, Agriculture and Food Production · Countries: IT, ES, US
Recent victims
View all →| Victim | Sector | Country | Data | Files | Posted | Status |
|---|---|---|---|---|---|---|
| Aeroklas Duys / Duys Engineering Group aeroklasduys.co.za | automotive manufacturing | South Africa | — | — | Oct 12, 2026 | published |
| Saber1 saber1.com | Machine vision components; industrial cameras; image processing systems | USA | — | 2 | Oct 9, 2026 | countdown |
| idi pharma idipharma.com | Pharmaceuticals | Italy | — | 2 | Oct 9, 2026 | published |
| Greggio Argento greggio.com | Agriculture and Food Production | Italy | 500GB | 1 | Oct 6, 2026 | published |
| UNION FA rogdianakis.gr | Accounting, tax and consulting services | GR | — | — | Oct 2, 2026 | published |
| Far West Contractors farwestcontractors.com | Construction | United States | — | — | Oct 2, 2026 | published |
| SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA shaheenlaw.com | Legal services | USA | 27GB | — | Aug 24, 2026 | published |
| FBC fbcweb.furnbed.co.za | Construction | South Africa | 19.8 MB | 1 | Aug 24, 2026 | published |
| JP Molyneux Studio molyneuxstudio.com | Interior design | GB | 700GB | — | Aug 20, 2026 | published |
| UFOC ufoc.com.tw | Telecommunications | Taiwan | 470gb | — | Aug 19, 2026 | published |
| Global Terminal Services globalterminal-tr.com | Oil & fuel storage / logistics | Turkey | 470gb | — | Aug 19, 2026 | listed |
| LT Group / Fortune Tobacco Corp pmi.com | Tobacco | Philippines | 27 GB | — | Aug 10, 2026 | published |
| AHENK lab ahenklab.com.tr | Medical laboratory | Turkey | — | — | Jul 28, 2026 | listed |
| DIATER diater.com | Biopharmaceutical | Spain | — | — | Jul 28, 2026 | published |
| Pasello data-pasello.com | heat treatment of metal alloys | Italy | — | — | Jul 28, 2026 | listed |
| Takis srl | Biotechnology | Italy | — | — | Jul 28, 2026 | published |
| Hardware Asesorias Software Ltda | Technology | CL | — | — | Jul 27, 2026 | |
| Tesco Engineer | Retail & E-Commerce | GB | — | — | Jul 27, 2026 | |
| High Class Car Limo | Transportation | US | — | — | Jul 26, 2026 | |
| West African Resources ltd | Energy & Utilities | AU | — | — | Jul 26, 2026 | |
| Caspian One | Energy & Utilities | AZ | — | — | Jul 26, 2026 | |
| Schaad, Balass, Menzl and Partner AG | Professional Services | CH | — | — | Jul 25, 2026 | |
| HİDROMEK | Manufacturing | TR | — | — | Jul 25, 2026 | |
| KEMEK | Manufacturing | — | — | Jul 25, 2026 | ||
| KeNHA | Government & Defense | KE | — | — | Jul 25, 2026 |
Found by ThreatCluster
33 total from our crawlListed on this group's leak site and not present in the aggregated feeds.