DeadLock Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated the Deadlock ransomware strain, identified by the .dlock extension and randomized identifiers. Our forensic analysis confirms this is a sophisticated, enterprise-targeting ransomware operation. This strain employs a robust hybrid cryptosystem. Critically, our analysis indicates that this variant correctly implements the cryptographic primitives, and no known…

DeadLock is a sophisticated ransomware variant that employs military-grade encryption to hijack user data. Identified by the .dlock extension appended to filenames, this malware targets critical documents, photos, videos, and databases. The attackers utilize the decentralized Session messenger for communication, aiming to maintain anonymity while coercing victims into paying a ransom in Bitcoin or Monero….