DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
Summary
The ransomware group DeadLock is employing a decentralized infrastructure model, integrating the Session messaging network with blockchain services. This approach aims to enhance their operational resilience by making their extortion infrastructure more difficult to disrupt.
IFF Assessment
FOE
The use of decentralized infrastructure by ransomware groups makes it harder for law enforcement and security professionals to track and disrupt their operations, posing a significant threat.
Defender Context
Defenders need to be aware of ransomware groups adopting decentralized and blockchain-based infrastructure. This trend makes traditional takedown methods less effective, requiring new strategies for attribution and disruption.