DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

DeadLock ransomware operators have integrated Polygon smart contracts into their extortion infrastructure, making it more resistant to disruption. By leveraging decentralized technologies, the group aims to enhance the resilience of their operations, which include victim communication and data leak activities. The recovery ecosystem utilized by DeadLock combines the Session messaging network with blockchain-based services, enabling the storage and delivery of resources required throughout the extortion process¹. This development underscores the evolving nature of ransomware tactics, as threat actors continue to adopt innovative methods to maintain operational continuity. The use of blockchain-backed services and decentralized infrastructure allows DeadLock to reduce its reliance on traditional, vulnerable infrastructure. So what matters to practitioners is that this shift highlights the importance of proactive operational resilience planning to mitigate the impact of such sophisticated ransomware attacks.