Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Mountlocker

Inactive for 4+ yr RaaS
World map Statistics
MountLocker operated as a ransomware-as-a-service from July 2020, using a standard developer/affiliate revenue split and leveraging compromised RDP credentials for initial access, propagating laterally via Windows Active Directory APIs and targeting over 2,600 file extensions.
Victims
18
none this month
Rank
#180 / 388
all time
First victim
2021-02-07
estimated attack date
Last victim
2022-02-08
1741 days ago
Attack → claim
—
average delay
Countries
0
hit
Infostealer
0.0%
of victims with a domain

Victims per month

By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Manufacturing 10 · 56%
  • Transportation 3 · 17%
  • Professional Services 2 · 11%
  • Retail & E-Commerce 1 · 6%
  • Healthcare 1 · 6%
  • Financial Services 1 · 6%

What ransomware.live knows about mountlocker