DeadLock Ransomware Leverages Polygon Smart Contracts for Resilient Extortion Infrastructure

DeadLock Ransomware employs Polygon smart contracts to create a decentralized, censorship-resistant infrastructure for extortion operations, enhancing resilience against takedown efforts. The malware uses blockchain-backed proxy server rotation and HTML-based interactive chat for victim communication, complicating traditional disruption methods.

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience.

"Its recovery ecosystem combines the Session messaging network with blockchain-backed services that store and deliver resources used throughout the extortion process," the Microsoft Threat

Read original article