DeadLock ransomware leverages blockchain-backed services to evade takedowns
Source headline: DeadLock ransomware uses blockchain to resist infrastructure takedown
Intelligence Summary
DeadLock ransomware is reportedly using decentralized, blockchain-backed infrastructure to protect its communications. The approach is designed to make it harder for defenders to disrupt channels used for victim notifications and data-leak activities. By shifting reliance to resilient services, the operation aims to maintain continuity even when parts of its infrastructure are removed. This increases the persistence and reach of extortion workflows. Organizations should review incident response readiness and monitor for DeadLock-linked indicators and unusual extortion-related communications.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.