Group profile
AiLock
AiLock is a ransomware operation that emerged in early 2025, marketing itself as AI-assisted ransomware using a hybrid ChaCha20/NTRUEncrypt encryption scheme and double-extortion tactics, actively recruiting affiliates and threatening regulatory reporting if ransoms are unpaid.
Sectors hit
- Business Services
- Unspecified
- Manufacturing
- Consumer Services
- Construction
- Transportation/Logistics
- Technology
- Professional Services
Countries hit