deadlock
ransomware group · aka DeadLock · unknown · active since 2024-09 (first publicly documented; some vendor timelines place earliest activity in September-October 2024)
Victims · 7d
0flat
Victims · 30d
6active targets
Victims · 90d
28
All-time (tracked)
103since 2026-06-15
Last post
09-01 21:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Deadlock is an active ransomware group first documented by vendors in late 2024, known for a Go-written encryptor and double-extortion tactics. Early campaigns spread through pirated-software and torrent downloads bundled with an installer that displayed a fake 'I'm not a robot' CAPTCHA before executing the malware, and a later variant with a new loader and updated encryptor was described by Trend Micro in 2025. The group exfiltrates victim data before encryption and posts non-payers to its Tor leak site, with ransom negotiations historically handled via Tox messenger and, in later variants, email. Public reporting does not attribute a country of origin, and no earnings figures have been published. This dashboard's tracking shows sustained activity, with 103 leak-site posts in the past 90 days and the most recent post on 2026-09-01.
Tactics & tooling
- Delivered via pirated software and torrent downloads bundled with an installer (2024-2025 campaigns)
- Fake 'I'm not a robot' CAPTCHA (legit.exe) used to gain user trust and execution (Progress/Telerik research, 2024)
- Go-based encryptor; later variant adds a new loader and updated encryptor (Trend Micro, 2025)
- Double extortion: data exfiltration before encryption, leak-site posting if ransom unpaid
- Ransom-note contact via Tox messenger; later variants direct victims to contact email addresses
- High-volume, size-agnostic targeting across multiple countries rather than sector- or region-specific campaigns
Targeted sectors
legalprofessional servicesmanufacturingconsumer goods (incl. tobacco)healthcare/medical labslogistics/terminal services
Notable public victims
JP Molyneux Studio (luxury yacht design studio; leak-site listing), LT Group / Fortune Tobacco Corp (Philippine conglomerate; leak-site listing), Global Terminal Services (leak-site listing), SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA (leak-site listing)
Estimated earnings
No public figure.
Leak-site victims103 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| TPToys | · Jun 15, 2026 | TP Toys is a UK-based company that has specialized in designing and manufacturing high-quality children’s outdoor play equipment for over 60 years https://www.tptoys.com/ |
| EXPRESOKNA SP. Z O.O. | · Jun 15, 2026 | EXPRESOKNA SP. Z O.O. a Polish manufacturer and distributor specializing in window and door systems. Based in Siemianowice Śląskie, the company is known for its exceptionally fast turnaround times for PVC and aluminum products. https://expresokna.pl/ |
| Bär Cargolift Polska Sp. z o.o. | · Jun 15, 2026 | Bär Cargolift specializing in the manufacturing of hydraulic tail lifts for vehicles, featuring products with capacities from 500 kg to 3,000 kg. The site offers an online WebShop for spare parts, technical support via Bär CargoCheck, and operator training, with a local headquarters in Gdańsk. https://www.barcargolift.pl/ baer-cargolift.pl |
| Grupolider | Grupo Actual | · Jun 15, 2026 | The leaked files will be available for download on May 10, 2026. Grupolider is a prominent Angolan conglomerate that has been operating in the national market since 1999. Headquartered in Catete, Luanda, the group initially started as a freight forwarding company and has since diversified into a wide range of sectors including agriculture, construction, and furniture. Grupo Actual is a human resources and recruitment agency in Portugal that provides temporary work solutions, permanent recruitment, and selection services.Following a rebranding in late 2025, the company formerly known as Leader now operates under the Actual brand. https://grupolider-ao.com/ https://grupoactual.pt/ |
| Dyhrberg AG Switzerland | · Jun 15, 2026 | dyhrberg.ch |
| SKK Networks Sp. z o.o. and UNICARD Systems Sp. z o. o. and SKK SA | · Jun 15, 2026 | SKK Networks is a specialized IT infrastructure provider based in Kraków, Poland, that designs, builds, and maintains professional LAN and WLAN networks. They focus on creating high-performance connectivity solutions for challenging environments like high-bay warehouses, cold storage facilities, and industrial plants. Unicard Systems is a Polish manufacturer and integrator of security and building automation systems with over 30 years of experience. Based in Kraków, the company specializes in designing and implementing proprietary hardware and software solutions for business and public infrastructure. SKK Labels, a prominent Polish label manufacturer and printing company based in Kraków. With over 30 years of experience, the company provides comprehensive product marking solutions across various industries, including pharmaceutical, automotive, and logistics. https://www.skk-networks.com https://unicard.pl/ https://skk-labels.com/ |
| PB Sprinkler Engineering Sp. z o.o. and PLISZKA Fire Protection Engineering | · Jun 15, 2026 | PB Sprinkler Engineering (formerly Pliszka Sprinkler) provides comprehensive fire protection solutions, including technical design in 2D and 3D, and customized, certified systems. The company specializes in electronic detection and fixed gas extinguishing systems. Pliszka is a Polish engineering firm based in Gdańsk with over 30 years of experience specializing in comprehensive active fire protection systems. The company provides design, installation, and maintenance services for automatic extinguishing, fire alarm, and smoke removal systems, along with 24/7 service. https://pliszka.pl/en/ https://www.pb-se.pl/ |
| 8.2 Group e.V. | · Jun 15, 2026 | 8.2 Group an international network of over 40 independent engineering firms specializing in technical inspection, consulting, and engineering for renewable energy projects. Headquartered in Germany, the group provides services throughout the lifecycle of wind, solar, and battery storage projects worldwide. https://www.8p2.de/ |
| Integra and Operosa | · Jun 15, 2026 | The leaked files will be available for download on May 10, 2026. C.A.A. "Giorgio Nicoli" S.r.l. Integra S.r.l L'Operosa S.p.A. https://www.caa.it/ https://www.integraerp.it/ https://www.operosa.it/ https://www.integrasrl.eu/ |
| JOSO | · Jun 15, 2026 | JOSO, a Norwegian industrial engineering and manufacturing company. Based in Lonevåg, Norway, the company specializes in producing high-quality mechanical components and hardware. https://joso.no/ |
| GEOPARTNER Sp. z o.o. and GEOPARTNER GEOMATICS Sp. z o.o. | · Jun 15, 2026 | Geopartner Geomatics Sp. z o.o. is a Gdańsk-based engineering firm specializing in advanced surveying, mapping, and BIM services for the infrastructure sector. The company utilizes LiDAR scanners and drones to support road and rail projects, operating in the Polish and Swedish markets. GEOPARTNER Sp. z o.o. is a Polish engineering firm specializing in geophysical and geotechnical services, primarily focused on investigating ground conditions for energy, infrastructure, and mining projects. https://www.geopartner-geomatics.pl/ https://geopartner.pl/ |
| FIRESTA | · Jun 15, 2026 | Firesta-Fišer, a.s. is a Czech construction company based in Brno, established in 1990, specializing in transport infrastructure, including bridge, road, and railway construction. With over 600 employees, the company also operates in Slovakia, Poland, and Romania. https://www.firesta.cz/ |
| UFL | · Jun 15, 2026 | United Finance Limited (UFL) is a 100% nationally owned financial institution based in Papua New Guinea. Registered in 2017 and fully established in April 2019, the company provides personal and commercial lending services designed to assist individuals and small businesses with quick access to capital. https://www.ufl.com.pg/ |
| Picassent | · Jun 15, 2026 | Ayuntamiento de Picassent (Picassent City Council), a municipality located in the Horta Sud region of Valencia, Spain. https://www.picassent.es/ |
| Starconn | · Jun 15, 2026 | Starconn (registered as Chief Land Electronic Co., Ltd.) is a top-five connector manufacturer based in Taiwan. Founded in 1978, the company specializes in high-precision connectors for telecommunications, data centers, and consumer electronics. Core Products & Services Connectors: They produce a wide range of connectors, including high-speed backplane (up to 25Gbps), FPC, and EDSFF E1.S connectors. Target Markets: Their components are used in desktops, laptops, LCD panels, servers, storage, and networking equipment. Manufacturing Capabilities: The company integrates plastic mold tooling, micro-injection molding, and automated assembly. Technical Services: They offer R&D partnerships for custom system designs, utilizing CAE software for mechanical and signal integrity simulations. Company Details Headquarters: Wugu District, New Taipei City, Taiwan. Presence: They have significant operations and certifications (ISO 9001, IATF 16949) in both Taipei and Kunshan, China. Intellectual Property: As of 2022, they held over 500 patents. |
| EFCA | · Jun 15, 2026 | EFCA a specialized accounting firm based in Paris, France. Core Expertise With over 30 years of experience, the firm specializes in real estate accounting and property management. Key services and areas of focus include: Property Management Support: Expertise in managing accounts for property administrators and real estate agencies. Trustee & Agent Accounting: Mastery of "comptabilité mandants" (client/trustee accounting) and navigating relationships with guarantee funds. Tax & Advisory: Handling complex tax and accounting issues specific to the real estate market. https://www.efca-europe.com/ |
| AKSV | · Jun 15, 2026 | AK Service & Vedligehold is a Hillerød-based contractor providing construction, maintenance, and energy solutions across Zealand, Denmark. The company specializes in electrical work, heat pumps, charging stations, carpentry, and masonry services. https://aksv.dk/ |
| Bridgeport S.p.A. | · Jun 15, 2026 | Bridgeport a leading Italian manufacturing company specializing in the production of valves for air, gas, and fluids. https://www.bridgeport.it/ |
| SH Hoteles (Spain) | · Jun 15, 2026 | This chain operates various urban and beach properties primarily in the Valencia and Alicante regions. Key Properties: SH Valencia Palace: A 5-star hotel located near the city center of Valencia. SH Villa Gadea: A luxury resort in Altea known for its extensive Thalasso-Spa facilities. SH Inglés: A boutique hotel situated in a renovated 18th-century palace in Valencia's historical center. Other locations: Includes properties in Jávea, Denia, and Gandía |
| Bombas Ideal | · Jun 15, 2026 | Bombas Ideal is a Spanish manufacturer established in 1902 specializing in water pumps and pressure systems for agricultural, industrial, and fire protection applications. Based in Valencia, the company offers a range of vertical, submerged, and solar pumping solutions with international operations. https://www.bombasideal.com |
| Ring Textile Production RTP SRL | · Jun 15, 2026 | rtpbz.ro is the official domain for Ring Textile Production RTP SRL, a Romanian textile manufacturing company based in Buzău. Industry: Manufacture of outerwear and tricot clothing, specializing in women's nightwear, underwear, and cotton/linen apparel. |
| ADM Value Barcelona | · Jun 15, 2026 | ADM Value is a leading international company specializing in outsourced customer relationship management (CRM) and Business Process Outsourcing (BPO) https://admvalue.com/ |
| Consulting Valladolid | · Jun 15, 2026 | Consulting Valladolid S.A. is a professional firm with over 40 years of experience providing comprehensive legal, tax, labor, and accounting services in Valladolid, Spain. The firm utilizes advanced technology to deliver tailored advisory solutions for both companies and individuals https://consultingvalladolid.es/ |
| ONE Contact | · Jun 15, 2026 | ONE Contact is a Swedish-managed contact center located in Barcelona, Spain, offering customer service, telemarketing, and retention strategies targeted at the Scandinavian market. Services include 1st/2nd line support and digital customer service solutions, with a physical office located on Calle Padilla in Barcelona. https://onecontact.se/ |
| Elmoris | · Jun 15, 2026 | Founded in 1996 in Vilnius, Lithuania, UAB Elmoris is a major manufacturer specializing in light metal packaging and "twist-off" lug caps for the food industry. The company is noted for producing PVC-free, environmentally friendly caps and providing metal printing services, holding AEO certification for international trade. https://www.elmoris.lt/ |
| Gerusia S.L. | · Jun 15, 2026 | Gerusia S.L., a Spanish service company headquartered in Oviedo, Asturias. Founded in 1995 and managed by women, the company provides a wide range of cleaning, auxiliary, and social-sanitary services for both public and private sectors throughout the Asturias region. https://gerusia.com/ |
| Maxplast AND Senoco | · Jun 15, 2026 | Senoco Tekstil Sanayi ve Ticaret A.Ş., a Turkish company specializing in the production of nonwoven fabrics. https://senoco.com.tr/ Maxplast is a Turkish manufacturing company based in Gaziantep that specializes in plastic packaging and houseware solutions. Founded in 2016, the company produces a wide range of PET and PE containers for various industries, including food, cosmetics, agriculture, and chemistry. https://www.maxplast.com.tr/ |
| Grupo Mercurio | · Jun 15, 2026 | Grupo Mercurio is a leading Mexican business conglomerate primarily recognized for its dominance in the bicycle and sports industry. Based in San Luis Potosí, the group operates one of the largest bicycle manufacturing plants in Mexico. https://www.grupomercurio.mx/ |
| Zaffrani Srl | · Jun 15, 2026 | Zaffrani Srl, an Italian manufacturer specializing in advanced agricultural machinery. Founded in 1959, the company is headquartered in the Marche region of Italy and has become a global leader in crop harvesting and drying technology. https://www.zaffrani.it/ |
| Eko-Flor Plus d.o.o. | · Jun 15, 2026 | Eko-Flor Plus d.o.o. is the largest private waste management company in Croatia. Headquartered in Oroslavje, the company specializes in collecting, sorting, and processing municipal and non-hazardous waste. https://eko-flor.hr/ |
| VBW Makelaars and Taxateurs | · Jun 15, 2026 | VBW Makelaars & Taxateurs specializes in real estate and property valuations in the Netherlands. Real estate agency and certified appraisers https://www.vbw.nl/ |
| Industrie Tecnologiche it | · Jun 15, 2026 | Industrie Tecnologiche is a software development center for the food industry. https://www.industrietecnologiche.com/ |
| LIVISTO | · Jun 15, 2026 | LIVISTO is an international pharmaceutical company with extensive experience in the veterinary market. https://www.livisto.pl/ |
| Anidaport - Investimentos Imobiliários Lda., Lisbon, Portugal | · Jun 15, 2026 | — |
| Optimal Care SA | · Jun 15, 2026 | Optimal Care Sociedad Anonima manufactures cleaning applications. The Company offers wet wipes for personal care, baby wipes, make-up remover, multipurpose wipes, and cleaning applications. Optimal Care serves customers in Spain. https://www.optimalcaresa.com/ |
| BARCELONA URBAN PROPERTY CHAMBER | · Jun 15, 2026 | https://cpubcn.com/ |
| Židlochovice city | · Jun 15, 2026 | Internal city administration documents have been leaked. Personal data from the database will be sold on darknet forums. Mayor 'Jan Vitula' claims the attack was prevented and no data was stolen. An investigation has been launched with the police, and countermeasures are being taken. =) xD https://www.zidlochovice.cz/ In press: https://www.denik.cz/regiony/zidlochovice-hackeri-kyberneticky-utok-vykupne-data-software-ransomware-kldr.html https://www.irozhlas.cz/zpravy-domov/poslete-bitcoiny-nebo-vas-nepustime-k-datum-urad-v-zidlochovicich-zjistuje-skody_2603172012_bva https://www.zidlochovice.cz/cs/aktuality/dulezite-upozorneni-mimoradne-uzavreni-meu.html Over 150 gigabytes of internal data |
| Werken Química Brasil S.A. | · Jun 15, 2026 | Werken Química Brasil S.A. is a company specializing in the development and supply of chemical products, headquartered in Indaial, Santa Catarina. It operates primarily within the textile industry, offering solutions for pretreatment, dyeing, printing, yarn lubrication, and effluent treatment, with a focus on functional technologies. https://www.werken.com.br/ |
| 3Gi Solutions, is an IT Services Provider located in Montreal, Quebec. | · Jun 15, 2026 | https://www.3gisolutions.com/ |
| Güven Mühendislik Makina | · Jun 15, 2026 | https://gmm.com.tr/ |
| Abhay Prabhavana | · Jun 15, 2026 | https://abhayprabhavana.org/ |
| Quetzal Química | · Jun 15, 2026 | https://quetzalquimica.com/ |
| CIATI | · Jun 15, 2026 | CIATI is a technology center dedicated to providing analytical services, technical assistance, and research and development for the food, geochemistry, and environmental industries. https://ciati.com.ar |
| ACU - The Automobile Club of Uruguay | · Jun 15, 2026 | https://acu.com.uy |
| DOCTUS USA Inc | · Jun 15, 2026 | Doctus offers top-tier medical records services in the USA, specializing in the management and organization of medical documentation. https://www.doctususa.com |
| WH Müller | · Jun 15, 2026 | WH Müller is a family business in the field of electrical engineering and IT technology. https://www.whm.de/ |
| Grupo Vanguardia | · Jun 15, 2026 | Grupo Vanguardia is an automotive group https://www.grupovanguardia.com/ |
| WiBeats S.r.l. | · Jun 15, 2026 | WIBEATS is one among the last few independent Italian Asset Management and Loans Service group, specialised performing and non performing real estate. https://www.wibeats.it/ Over 150 gigabytes of internal email datastore were stolen from this company. more than 50 GB of internal sensitive data containing contracts and official papers containing construction and renewal permits |
| Schlenker and Cantwell, P.A. | · Jun 15, 2026 | Schlenker & Cantwell, P.A. is a certified public accounting firm based in the USA, offering services such as tax preparation and planning, auditing and assurance, bookkeeping, payroll, financial reporting, consulting, and estate-trust management. https://cpasch.com/ |
| LA SEVILLANITA SRL | · Jun 15, 2026 | LA SEVILLANITA is the leading transport company in Argentina. https://www.lasevillanita-online.com/ |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .