Inactive ransomware operator
← All groupsCrosslock
1 victims indexed · first seen 3 years ago · last activity 3 years ago
At a glance
- Status
- inactive
- First seen
- 3 years ago
- Last activity
- 3 years ago
- Onion sites
- 1 known endpoint
About
References
6 linksExternal sources curated by the MISP threat-intel community.
- ransomlook.io/group/crosslock
- watchguard.com/wgrd-security-hub/ransomware-tracker/crosslock
- sentinelone.com/anthology/crosslock/
- netskope.com/blog/netskope-threat-coverage-crosslock-ransomware
- cyble.com/blog/crosslock-ransomware-emerges-new-golang-based-malware-on-the-horizon
- rewterz.com/rewterz-threat-alert-crosslock-ransomware-active-iocs
Timeline
1 monthsTop countries
MITRE ATT&CK
3 techniques · 3 tacticsTactics
Recent victims
Loading…
Onion infrastructure
1 known- http://crosslock5cwfljbw4v37zuzq4talxxhyavjm2lufmjwgbpfjdsh56yd.onion
Source
Updated 3 years agoData on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.
Get alerted the next time Crosslock posts a victim.
Add Crosslock to your watchlist — Pro pings you within 5 minutes of any new Crosslock leak-site post, Telegram callout, or affiliate-rebrand inference.
