Xinglocker

Inactive
XingLocker is a ransomware group that emerged in May 2021 as part of a franchise-style RaaS model built on a customized MountLocker payload, using IcedID for initial access and Windows Active Directory APIs for worm-style lateral movement across networks.
21 Victims
Apr 28, 2021 First Discovered
Oct 26, 2021 Last Discovered
1786 Days Inactive
0% Infostealer
0/1 Sites Online
Known Locations (1)
星Team News
xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion
Tools Used
DiscoveryEnum
AdFind, Bloodhound, PowerView, ShareFinder
Offsec
Cobalt Strike
Victims (21)

Detailed victim list temporarily unavailable

This group has 21 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.