mountlocker
- First seen
- 2020-07-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:57:07
Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications
Context
MountLocker is a ransomware family known for encrypting victim data and demanding a ransom for decryption. It employs double-extortion tactics, threatening to release stolen data if the ransom is not paid.
Detection coverage
- 2 YARA rules
Detection rules
- ARKBIRD_SOLG_RAN_Mountlocker_May_2021_1 (yara-rule)
- DITEKSHEN_MALWARE_Win_Mountlocker (yara-rule)
Reports & references
- ransomlook.io — Mountlocker (report)