Crosslock is a ransomware operator no longer publishing new disclosures. Darkfield has indexed 1 public victims claimed by this operator between April 17, 2023. Crosslock is an obscure ransomware group that emerged in April 2023, appearing to be financially motivated based on typical ransomware group patterns. The group's country of origin and operational structure remain unknown due to limited public documentation from major threat intelligence sources. Based on available data, the group has demonstrated minimal operational scale with only one documented victim, suggesting either highly targeted operations or limited operational capacity. The group appears to focus its targeting efforts primarily on Brazilian entities, though the specific attack methodology, encryption techniques, and extortion tactics employed by Crosslock have not been publicly documented by major cybersecurity firms or law enforcement agencies. No major campaigns, high-profile victims, or significant ransoms have been publicly attributed to this group by reputable sources. The current operational status of Crosslock remains unclear due to the limited threat intelligence available on this group.

Recent disclosures by Crosslock

All 1 indexed disclosures. Click any row for the full per-victim dossier.

• validcertificadora.com.brTechnology · Brazil · April 17, 2023

See every disclosure indexed for Crosslock →