Share on LinkedInShare on LinkedIn

ARTICLE · 08 NOVEMBER 2024

Ankura CTIX FLASH Update - November 5, 2024

A new Ransomware operation named "Interlock" has been attacking organizations worldwide, publishing data allegedly stolen from six (6) organizations since September 2024. Researchers have discovered Interlock.

United StatesTechnology

Ransomware/Malware Activity

Interlock Ransomware Targets FreeBSD Servers

A new Ransomware operation named "Interlock" has been attacking organizations worldwide, publishing data allegedly stolen from six (6) organizations since September 2024. Researchers have discovered Interlock variants built to encrypt FreeBSD servers, an operating system that is not usually targeted in ransomware operations. Experts speculate that Interlock targets FreeBSD because it is widely utilized in servers and critical infrastructure. Interlock engages in double extortion attacks: both encrypting critical systems and demanding ransom to suppress publication of stolen data. Interlock targets Windows as well as FreeBSD operating systems, clearing Windows event logs and self-destructing after encrypting files. Files encrypted by the ransomware are appended with a ".interlock" extension and a ransom note named "!___README___!.txt" is left in directories instructing victims on how to

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from