dagonlocker Ransomware
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Dagon Locker is a ransomware strain that first appeared in early 2023, evolved from the MountLocker/Quantum ransomware lineage, and uses IcedID as an initial access vector before deploying double-extortion attacks with ChaCha20+RSA-2048 encryption.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Discovery Enum
AdFind · Nbtscan · Seatbelt · ShareFinder · SoftPerfect NetScan
Exfiltration
RClone
Offsec
Cobalt Strike
RMM-Tools
AnyDesk
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live