M
Mountlocker
InactiveTotal victims
0
This month
0
Active
—
Traceable ransom payments: at least $4.218.728 (2 transactions, son kayıt 2020). Covers only reported crypto wallets; actual revenue is higher. Source: ransomwhe.re
DayBreach AI intelligence
Loading…
How it operates
MountLocker operated as a ransomware-as-a-service from July 2020, using a standard developer/affiliate revenue split and leveraging compromised RDP credentials for initial access, propagating laterally via Windows Active Directory APIs and targeting over 2,600 file extensions.