Satanlockv2

Active
SatanLock is a short-lived ransomware group that first appeared in April 2025 and abruptly shut down in July 2025 after claiming attacks against roughly 67 organizations — though over 65% of listed victims were duplicates from other groups — leaking all stolen data publicly upon shutdown.
4 Victims
Jul 3, 2025 First Discovered
Jul 6, 2025 Last Discovered
437 Days Inactive
0% Infostealer
1/1 Sites Online
Known Locations (1)
SatanLock V2 Leaks
tzhwmgguyxrg6q3tu4q3gvopcjynrhw6ryx2bdl5ghisdkyunfua5xyd.onion
Victims (4)

Detailed victim list temporarily unavailable

This group has 4 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.