Skip to content
RansomwareFinancialModerate sophistication · Organisation

Interlock

Interlock is a ransomware group with a financial motive, tracked by Brandefense. It targets 12 sectors, including Government and Technology, in 15 countries, including the United States and the United Kingdom. It uses 81 MITRE ATT&CK techniques and exploits 2 known CVEs.

Also known as
  • Nefarious Mantis
Techniques
81
Exploited CVEs
2
First seen
Oct 13, 2024
Last seen
Sep 7, 2026
Record updated

Who They Target.

Labelsglobalransomware

About Interlock.

Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.

Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.