mountlocker Unknown

First seen: -
0
Total Victims
0
Victims (30d)
Details

MountLocker operated as a ransomware-as-a-service from July 2020, using a standard developer/affiliate revenue split and leveraging compromised RDP credentials for initial access, propagating laterally via Windows Active Directory APIs and targeting over 2,600 file extensions.

Leak Site

Onion URL: http://mountnewsokhwilx.onion

Metadata

Slug: mountlocker

Created: 14/01/2026 08:19

Updated: 28/06/2026 16:02

Back