Skip to content
Ransomware group

DagonLocker

DagonLocker is a ransomware gang mentioned as one of the successor groups that emerged after the shutdown and fragmentation of Conti.

Profile source: Mallory opens in a new tab

DagonLocker

Family profile

DagonLocker is a ransomware gang mentioned as one of the successor groups that emerged after the shutdown and fragmentation of Conti. The supporting content states that, following Conti’s shutdown, members moved to other operations or started new gangs including Royal, Black Basta, BlackCat, AvosLocker, Karakurt, LockBit, Silent Ransom, DagonLocker, and ZEON. No additional high-confidence details on DagonLocker’s targets, tactics, techniques, or sub-groups are provided in the content. Alias provided: dagonlocker.

Ransomware.live

Operational record

View group record ↗

Discovery Enum

  • AdFind
  • Nbtscan
  • Seatbelt
  • ShareFinder
  • SoftPerfect NetScan

Exfiltration

  • RClone

Offsec

  • Cobalt Strike

RMM Tools

  • AnyDesk

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.