Dagon Locker is a ransomware group evolved from MountLocker lineage, known for double-extortion attacks.
Dagon Locker is a ransomware group evolved from the MountLocker/Quantum ransomware lineage, first seen in early 2023. It uses IcedID as an initial access vector. Key TTPs include double-extortion attacks employing ChaCha20 + RSA-2048 encryption. Defenders should focus on detecting IcedID loaders and reinforcing backup strategies against extortion phases.
Dagon Locker is a ransomware strain that first appeared in early 2023, evolved from the MountLocker/Quantum ransomware lineage, and uses IcedID as an initial access vector before deploying double-extortion attacks with ChaCha20+RSA-2048 encryption.
The Dagon Locker ransomware group uses IcedID as an initial access vector.
Dagon Locker evolved from the MountLocker/Quantum ransomware lineage and was first seen in early 2023.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.