Interlock is a financially motivated ransomware group that first emerged in September 2024, not operating as a Ransomware-as-a-Service model. The group has shown an evolution from using basic PowerShell backdoors to developing multi-language remote access trojans and cross-platform encryption capabilities for Windows, Linux, FreeBSD, and ESXi virtual machines. Interlock is known for its double extortion tactics, combining data encryption with the threat of public data exposure, and primarily engages in "big game hunting" by targeting large organizations. The group notably utilizes the "ClickFix" social engineering technique for initial access and has been observed to have potential overlaps or a shared ecosystem with the Rhysida ransomware group, indicating a possible lineage or close association.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker