XingLocker emerged in May 2021 as a ransomware group operating under a franchise-style Ransomware-as-a-Service (RaaS) model. The group is a rebranded version of Mount Locker ransomware, deploying customized MountLocker payloads. Their primary motivation is financial gain through large ransom demands, employing double extortion tactics by threatening to publicly release stolen data if payment is not made. A distinctive characteristic is their operational model, where affiliates rebrand the ransomware before deploying it, rather than simply distributing it under the original parent name, which can make investigations more complex.

URLs nuevas detectadas en IntelTracker