Deadlock

☆ pin

Also known as DeadLock

Reports

100

First seen

Mar 19, 2026

Last seen

Aug 12, 2026

Motivation

Financial

Targeting

Sectors

Manufacturing ×18 Other ×15 Professional Services ×8 Transport & Logistics ×6 Technology ×5 Healthcare ×3 Government ×3 Financial Services ×2

Victim regions

×2

×10

Spain×10

Italy×6

Poland×5

Türkiye×4

United States×3

Sweden×3

Czechia×2

Brazil×2

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1490 Inhibit System Recovery ×3T1486 Data Encrypted for Impact ×3T1562.001 Impair Defenses: Disable or Modify Tools ×3T1005 Data from Local System ×2T1543.003 Create or Modify System Process: Windows Service ×2T1068 Exploitation for Privilege Escalation ×1T1562.009 Impair Defenses: Safe Mode Boot ×1T1112 Modify Registry ×1T1059.003 Command and Scripting Interpreter: Windows Command Shell ×1T1053 Scheduled Task/Job ×1T1567 Exfiltration Over Web Service ×1T1059.001 Command and Scripting Interpreter: PowerShell ×1

Indicators

domain ×144filename ×51ip_v4 ×42hash_md5 ×6hash_sha1 ×5ethereum_address ×4registry_key ×3url ×2email ×2bitcoin_address ×1hash_sha256 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Deadlock

Targeting

Top ATT&CK techniques

Indicators

Recent reports

DeadLock ransomware uses blockchain to resist infrastructure takedown

DeadLock Ransomware Uses Polygon Smart Contracts to Enhance Extortion Infrastructure Resilience

Deadlock publishes LT Group / Fortune Tobacco Corp as ransomware victim

DeadLock ransomware: Rust-based encryptor with decentralized recovery infrastructure

Deadlock ransomware gang publishes Ahenk Laboratuvarı as victim

Deadlock ransomware claims DIATER, Spanish biopharmaceutical firm

Deadlock ransomware gang publishes Pasello as victim

Deadlock ransomware gang publishes Takis srl as victim

Deadlock ransomware claims Hardware Asesorías Software Ltda victim

Deadlock ransomware claims Tesco Engineer as victim

Deadlock Ransomware Claims High Class Car Limo as Victim

Deadlock ransomware publishes West African Resources Limited as victim

Deadlock ransomware gang publishes Caspian One as victim

Deadlock publishes Schaad, Balass, Menzl and Partner AG on ransomware.live

Deadlock ransomware claims HİDROMEK as victim

Deadlock ransomware gang publishes KEMEK as victim

Deadlock ransomware claims Kenya National Highways Authority (KeNHA)

Deadlock ransomware claims BioResearch victim

Deadlock ransomware claims Grupo Relesa as victim

Deadlock ransomware claims Carrier AB as victim

Deadlock ransomware claims Enedo Power (Inission Power) as victim

Deadlock ransomware gang publishes CNA as victim

Deadlock ransomware claims Vinilon as victim

Deadlock ransomware group claims Aldaco Avance 2022 S.L. as victim

Deadlock ransomware gang publishes Catcorp as victim

Deadlock ransomware claims breach of Hungarian construction firm Weinberg '93 Építő Kft.

Deadlock ransomware gang claims Morton Grove Park District breach

Deadlock ransomware publishes LA SEVILLANITA SRL as new victim

Deadlock ransomware gang publishes Schlenker and Cantwell, P.A. as victim

Deadlock ransomware gang publishes WiBeats S.r.l. as victim