SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.deadbolt (Back to overview)

DEADBOLT

DEADBOLT is a linux ransomware written in Go, targeting QNAP NAS devices worldwide. The files are encrypted with AES128 encryption and will have the .deadbolt extension appended to file names.

References
2022-06-06 ⋅ Trend Micro ⋅ Trend Micro
@online{micro:20220606:closing:7414aab, author = {Trend Micro}, title = {{Closing the Door: DeadBolt Ransomware Locks Out Vendors With Multitiered Extortion Scheme}}, date = {2022-06-06}, organization = {Trend Micro}, url = {https://www.trendmicro.com/en_us/research/22/f/closing-the-door-deadbolt-ransomware-locks-out-vendors-with-mult.html}, language = {English}, urldate = {2022-06-09} } Closing the Door: DeadBolt Ransomware Locks Out Vendors With Multitiered Extortion Scheme
DEADBOLT
2022-05-11 ⋅ Kaspersky ⋅ GReAT
@online{great:20220511:new:a56bc90, author = {GReAT}, title = {{New ransomware trends in 2022}}, date = {2022-05-11}, organization = {Kaspersky}, url = {https://securelist.com/new-ransomware-trends-in-2022/106457/}, language = {English}, urldate = {2022-05-17} } New ransomware trends in 2022
BlackCat Conti DEADBOLT DoubleZero LockBit PartyTicket StealBit
2022-02-03 ⋅ RiskIQ ⋅ RiskIQ
@online{riskiq:20220203:riskiq:2c2cdfe, author = {RiskIQ}, title = {{RiskIQ: Exposed QNAP Devices are Vulnerable to Compromise}}, date = {2022-02-03}, organization = {RiskIQ}, url = {https://community.riskiq.com/article/1601124b}, language = {English}, urldate = {2022-02-04} } RiskIQ: Exposed QNAP Devices are Vulnerable to Compromise
DEADBOLT
2022-01-25 ⋅ Bleeping Computer ⋅ Lawrence Abrams
@online{abrams:20220125:new:5f8b7cf, author = {Lawrence Abrams}, title = {{New DeadBolt ransomware targets QNAP devices, asks 50 BTC for master key}}, date = {2022-01-25}, organization = {Bleeping Computer}, url = {https://www.bleepingcomputer.com/news/security/new-deadbolt-ransomware-targets-qnap-devices-asks-50-btc-for-master-key/}, language = {English}, urldate = {2022-01-28} } New DeadBolt ransomware targets QNAP devices, asks 50 BTC for master key
DEADBOLT

There is no Yara-Signature yet.