Crosslock
Ransomware Group Profile
Overview
CrossLock is a short-lived Go-based ransomware group that appeared in April 2023 and went dark by July 2023, using Curve25519 and ChaCha20 encryption and double-extortion tactics with only one known confirmed victim in the IT sector in Brazil.
Dark Web Infrastructure (1)
crosslock5cwfljbw4v37zuzq4talxxhyavjm2lufmjwgbpfjdsh56yd.onion
Activity Timeline
First Seen2023
Last Seen2023
Leak Sites1
Quick Actions