CrossLock emerged no later than April 2023 as a ransomware group primarily driven by financial gain. The group distinguishes itself through its documented use of zero-day vulnerabilities for initial access and maintains a robust operational security posture. While exhibiting similar characteristics to groups like DarkSide, Conti, and REvil, CrossLock operates as a distinct entity, focusing on locking victims out of systems and demanding ransoms following data exfiltration.

Paises afectados

URLs nuevas detectadas en IntelTracker