Tag: interlock rat

3 Attack Reports | 0 Vulnerabilities

Attack reports

Threat Actor Profile: Interlock Ransomware

Interlock, a relatively new ransomware group first observed in September 2024, has gained prominence in 2025 as an opportunistic ransomware operator. Unlike traditional Ransomware-as-a-Service models, Interlock operates without affiliates or public advertisements. The group conducts double extortio…

social engineering

double extortion

remote access trojan

compromised websites

Published: August 15, 2025

Downloadable IOCs: 24

KongTuke FileFix Leads to New Interlock RAT Variant

A new and resilient variant of the Interlock ransomware group's remote access trojan (RAT) has been identified. This PHP-based malware, a shift from the previous JavaScript-based NodeSnake, is being used in a widespread campaign associated with the LandUpdate808 (KongTuke) web-inject threat cluster…

cloudflare tunnel

Published: July 15, 2025

Downloadable IOCs: 12

Interlock ransomware evolving under the radar

The Interlock ransomware group, active since September 2024, has shown adaptability and innovation in its tactics despite a relatively low victim count. They employ fake browser updates and the ClickFix technique for initial access, followed by a multi-stage attack chain involving PowerShell backdo…

double extortion

remote access trojan

credential stealer

interlock ransomware

powershell backdoor

Published: April 16, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports