DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

DeadLock ransomware is using Polygon smart contracts and decentralized infrastructure, including the Session messaging network, to store and deliver extortion resources, making it harder to disrupt victim communications and data leak operations.

DeadLock ransomware is now using Polygon smart contracts and decentralized infrastructure to resist disruption. The group leverages the Session messaging network and blockchain-backed services to store and deliver extortion resources, creating a "recovery ecosystem" that is harder to takedown. Microsoft Threat Intelligence reported the shift, noting the tactic improves operational resilience by decentralizing victim communications and data leak operations.