Crosslock
Crosslock is a ransomware group with a financial motive, tracked by Brandefense. It targets 3 sectors, including Government and Business Services, in Brazil.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Apr 1, 2023
- Last seen
- Jul 31, 2023
- Record updated
Who They Target.
Sectors · 3
Countries · 1
Labelsransomware
About Crosslock.
CrossLock is a short-lived Go-based ransomware group that appeared in April 2023 and went dark by July 2023, using Curve25519 and ChaCha20 encryption and double-extortion tactics with only one known confirmed victim in the IT sector in Brazil.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.