DEADBOLTMalware
DEADBOLT is a linux ransomware written in Go, targeting QNAP NAS devices worldwide. The files are encrypted with AES128 encryption and will have the.deadbolt extension appended to file names.From MISP Galaxy
Last reported 4 years ago, by Group-IB1 report
What the reports say
1 report, newest first · the exact sentence from each-
Deadbolt ransomware decryption: unlock your data“Before decrypting the files, DeadBolt reads the metadata, checks the marker “DEADBOLT”, and receives the size of the original file.”
Indicators in its reports
named in the reports above- deadbolt[.]pidin 1 report
- rand[.]readin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.