www.microsoft.com 8/10/2026, 3:51:48 PM · external

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
CyberSIXT Evidence Panel Source marked as original reporting

THE blog discusses DeadLock ransomware, a new threat identified in July 2025, notable for its use of a decentralized infrastructure that facilitates victim communication and data leaks. It employs double extortion tactics, encrypting files while threatening to publicly release stolen data. The ransomware's architecture includes a messaging network and blockchain services to improve resilience against disruptions.

Technical details reveal advanced features like resource-aware throttling during encryption, geofencing capabilities, and a unique recovery chat system that operates without traditional server infrastructure. The blog also offers mitigation strategies and indicators of compromise for organizations to defend against this emerging threat.

View full article

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline