SigmaLock Active
Ransomware group first observed in 2020. Uses TDSSKiller for deployment.2
Total Victims
2020-08-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
43.8d
Avg Delay
0
Negotiations
ONION URLS
pu4dm65fs7dxhh2hzt3j5va6k25i5twngnejijprsg7oak3dfkaq4hzg.onion
TOOLS
TDSSKiller
ConnectWise
Certify
ADFind
FILE EXTENSIONS
.broken
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Stellar Logistics | United Kingdom | Mining | Published |
| 2026-03-05 | Pinnacle Inc | Norway | Education | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes