← Back to all threat actors

xinglocker

XingLocker is a ransomware group that emerged in May 2021 as part of a franchise-style RaaS model built on a customized MountLocker payload, using IcedID for initial access and Windows Active Directory APIs for worm-style lateral movement across networks.

How we source and review actor profiles

Motivation

ransomware

Last seen

2021-10-26

Sectors

manufacturing, healthcare, financial-services, professional-services, government-defense, energy-utilities, transportation, other, technology

Status

Dormant

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

2021-10-26First listed

Victim claimWayne Automatic Fire Sprinklers, Inc. listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-10-26Last observed

Indicator1 indicator cataloged

Types: onion.

2021-10-08First listed

Victim claimTilia GmbH. TILIA GROUP listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-08-17Claimed

Victim claimJ.Irwin Company listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-07-08Claimed

Victim claimDiaSorin listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-06-03Claimed

Victim claimGreenwood Fabricating & Plating listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-06-02Claimed

Victim claimAQUALUNG listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-06-02Claimed

Victim claimPositive Promotions, Inc. listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-27Claimed

Victim claimSharafi Group Investments listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-24Claimed

Victim claimT.I.S. Group listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-24Claimed

Victim claimCoastal Family Health Center listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-18Claimed

Victim claimOSF Healthcare System listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-14Claimed

Victim claimCBN Logistic listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-14Claimed

Victim claimLineStar listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-14Claimed

Victim claimSolen A.S listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-13Claimed

Victim claimDesert Plastering LLC listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-11Claimed

Victim claimGulfeagle Supply listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-06Claimed

Victim claimBridgelux, Inc. listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-06Claimed

Victim claimWashoe Tribe listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-05-06Claimed

Victim claimGlobeMed Saudi listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-04-29Claimed

Victim claimNAVNIT GROUP listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2021-04-29Claimed

Victim claimPezzuto Group listed by xinglocker

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

xinglockerCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...