Search threats, CVEs… ⌘K
← Back to all threat actors

alphalocker

AlphaLocker is a low-cost ransomware operation built on the EDA2 open-source project that sells affiliates an admin panel, ransomware executable, and decryption key generator, lowering the barrier for entry-level cybercriminals using double-extortion tactics.

How we source and review actor profiles
Motivation
ransomware
Last seen
2026-02-28
Sectors
professional-services, technology, manufacturing, healthcare, energy-utilities, transportation, retail-e-commerce, other, financial-services
Status
Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

First listed
Victim claimwww.pyramisgroup.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator1 indicator cataloged

Types: onion.

First listed
Victim claimwww.bew.co.th listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.myriversidedentaloffice.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.unterkofler.info listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.automotiveml.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.verdugohillsdental.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.mercantetubos.com.br listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.libertydentaltown.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.adhunikpower.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.sonoshowmoveis.com.br listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimgrupozeta.com & www.grupozetajalisco.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimnubox.com & sumasaas.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimipathpr.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimgazomet.pl & cgas.pl listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.arkworkplacerisk.co.uk listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimgoftac.com/ firsttx.com First Texas Alliance Corp (FTAC) listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.carri.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimwww.consorzioinnova.it listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimbiw-burger.de listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimhttps://goftac.com/ firsttx.com First Texas Alliance Corp (FTAC) listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimhttps://geodis.com listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimhttps://www.consorzioinnova.it listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimBM Catalysts bmcatalysts.co.uk listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimelandenergy.com Eland Energy listed by alphalocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

The interactive view includes 31 dated events with category filters and paging.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

alphalockerCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...