DEADBOLT
- Malware type
- ransomware
- Last IoC activity
- 2026-05-15 13:55:23
- Profile updated
- 2026-07-07 13:46:43
Context
DEADBOLT is a linux ransomware written in Go, targeting QNAP NAS devices worldwide. The files are encrypted with AES128 encryption and will have the .deadbolt extension appended to file names.
Reports & references
- Kaspersky — 106457 (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Deadbolt (report)
- community.riskiq.com — 1601124B (report)
- bleepingcomputer.com — New Deadbolt Ransomware Targets Qnap Devices Asks 50 Btc For Master Key (report)
- Trend Micro — Closing The Door Deadbolt Ransomware Locks Out Vendors With Mult (report)