Skip to content
RansomwareFinancialAdvanced sophistication · Organised crime network

Xinglocker

Xinglocker is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector.

Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

Sectors · 1
Labelsransomware

About Xinglocker.

XingLocker is a ransomware group that emerged in May 2021 as part of a franchise-style RaaS model built on a customized MountLocker payload, using IcedID for initial access and Windows Active Directory APIs for worm-style lateral movement across networks.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.