xinglocker Ransomware
Tracked since Apr 29, 2021
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
XingLocker is a ransomware group that emerged in May 2021 as part of a franchise-style RaaS model built on a customized MountLocker payload, using IcedID for initial access and Windows Active Directory APIs for worm-style lateral movement across networks.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Discovery Enum
AdFind · Bloodhound · PowerView · ShareFinder
Offsec
Cobalt Strike
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live