QuantumLocker
Aliases: Quantum, Mount Locker, DagonLocker
- First seen
- 2021-09-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-09 20:14:51
- Profile updated
- 2026-07-07 13:48:06
Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector technology-and-telecommunications
Context
QuantumLocker, also known as Quantum, Mount Locker, and DagonLocker, is a ransomware family that encrypts files on infected systems to demand a ransom from victims. It has been used in targeted attacks across various industry sectors, focusing on critical infrastructure and services.
Used by threat actors
- Quantum Ransomware Compromise (campaign)
Related threat objects
- Mountlocket (malware)
- Conti (malware)
Reports & references
- Broadcom/Symantec — Ransomware Virtual Machines (report)
- bleepingcomputer.com — Mount Locker Ransomware Joins The Multi Million Dollar Ransom Game (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Mount Locker (report)
- securityscorecard.pathfactory.com — Quantum Ransomware (report)
- bleepingcomputer.com — Mount Locker Ransomware Now Targets Your Turbotax Tax Returns (report)
- dissectingmalwa.re — Between A Rock And A Hard Place Exploring Mount Locker Ransomware (report)
- blogs.blackberry.com — Mountlocker Ransomware As A Service Offers Double Extortion Capabilities To Affiliates (report)
- github.com — Mountlocker (report)
- chuongdong.com — Mountlockerransomware (report)
- kienmanowar.wordpress.com — Quicknote Mountlocker Some Pseudo Code Snippets (report)
- cybereason.com — Cybereason Vs. Quantum Locker Ransomware (report)
- thedfirreport.com — Quantum Ransomware (report)
- ransomlook.io — Quantum (report)
- ransomlook.io — Dagonlocker (report)
- sentinelone.com — Dagon Locker (report)
- asec.ahnlab.com — 42037 (report)
- Broadcom/Symantec — Dagon Locker Ransomware (report)
- mphasis.com — Icedid Infection To Dagon Locker Ransomware Apr29 22 7 (report)