Skip to content
RansomwareFinancialAdvanced sophistication

Ailock

Ailock is a ransomware group with a financial motive, tracked by Brandefense. It targets 8 sectors, including Technology and Manufacturing, in 9 countries, including the United States and the United Kingdom. It uses 6 MITRE ATT&CK techniques.

Techniques
6
Exploited CVEs
No CVE data
First seen
Mar 1, 2025
Last seen
Aug 26, 2026
Record updated

Who They Target.

About Ailock.

AiLock is a ransomware operation that emerged in early 2025, marketing itself as AI-assisted ransomware using a hybrid ChaCha20/NTRUEncrypt encryption scheme and double-extortion tactics, actively recruiting affiliates and threatening regulatory reporting if ransoms are unpaid.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.