Threat actor

Interlock

In 11 briefs, most recently 21 March 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. Navia breach exposes 2.7M records; Trivy GitHub Actions compromised again; Magento defacement campaign hits thousands of sites.
  2. Cisco FMC zero-day exploited by Interlock ransomware, Stryker cyberattack tied to Iranian-linked Handala, and Aura breach exposing nearly 900,000 contacts.
  3. The SocksEscort proxy botnet takedown, Telus Digital and Loblaw breaches, and Veeam's seven critical Backup & Replication flaws.
  4. NNSA breach via Microsoft SharePoint zero-days, Clorox's $380M suit against Cognizant, and a backdoored npm 'is' package.
  5. SharePoint zero-days under active exploitation by Chinese APTs, Cisco ISE RCE flaws, and Dell's breach by World Leaks group.
  6. Louis Vuitton and McDonald's data breaches, Gravity Forms WordPress plugin supply chain attack, and Gigabyte UEFI firmware flaws enabling Secure Boot bypass.
  7. Kettering Health and Optima Tax Relief ransomware breaches, Qilin exploiting Fortinet flaws, and 86M AT&T records reportedly sold on the dark web.
  8. Kettering Health ransomware claim, AT&T breach data re-release, and BADBOX 2.0 botnet infecting over 1 million IoT devices.
  9. Critical WooCommerce Wishlist flaw puts 100k+ WordPress sites at risk; AyySSHush botnet hits 9,000 ASUS routers; Interlock ransomware targets universities.
  10. Healthcare breaches dominate: Yale New Haven Health exposes 5.5M patients, Interlock leaks DaVita data, and Lazarus Group targets South Korean firms with …
  11. SonicWall SMA VPN devices under active attack, Apple zero-days in targeted spyware attacks, and Smishing Triad toll SMS phishing in US and UK.