// THREAT ACTOR
SATANLOCK_
ActiveSATANLOCK is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of SATANLOCK — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
73
Victims tracked
1 / 7
Active mirrors
2025-04-07
First listing
2025-07-07
Most recent
Victims by year
- 2025 73
Leak site mirrors
7 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
212.24.99.211.satanLock Blog snapshot · 2025-04-25 10:11 -
5g2e.l.time4vps.cloudsatanLock Blog snapshot · 2025-04-25 10:07 -
mgeegnexyhhn5dpqewihjy33qyhng3gy66h3fogiwefl5hljhtmfznad.onionsnapshot · 2025-04-08 13:37 -
2hxbnjzuymvdca4buxlyu4eolz4mbbxw2cnpibbb2od7z77y76di7cad.onionsnapshot · 2025-05-05 20:14 -
satanlock2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onionsnapshot · 2025-06-07 11:27 -
tzhwmgguyxrg6q3tu4q3gvopcjynrhw6ryx2bdl5ghisdkyunfua5xyd.onionSatanLock V2 Leaks snapshot · 2026-08-06 21:27 -
42fybwnnv2t6fykirmgxpwvvfidgnfmegrz4lpi3vskivfid7z7kqyqd.onionSatanLock V2 Leaks snapshot · 2025-07-07 17:07
Recent victims
The 50 most recent victims claimed by SATANLOCK. Total in the index: 73.
| Date listed | Victim | Description |
|---|---|---|
| 2025-07-07 | Satanlock project will be shut down | Satanlock project will be shut down |
| 2025-07-06 | studionotarile.com | Viggiani Bullone Girardi |
| 2025-07-06 | https://klinikdrindrajana.com/ | Klinik Dr. Indrajana |
| 2025-07-04 | fkk.ac.th | fkk.ac.th is the official website of Fakkwan Wittayakom School, a Thai… |
| 2025-07-04 | https://www.teligent.se/ | Teligent Telecom AB – Teligent Telecom is a Swedish telecommunications… |
| 2025-04-23 | human.de | HUMAN, founded in 1972, is a Germany based privately owned company whi… |
| 2025-04-23 | bocagroup.com | As America's premier elevator and escalator consulting company, BOCA G… |
| 2025-04-23 | alentec.com | This is a public request for Alentec & Orion AB, you don't have much t… |
| 2025-04-23 | Württemberger Medien | Lassen Sie sich kostenlos von unseren Experten aus Stuttgart beraten. … |
| 2025-04-23 | copral.com.br | Greetings! copral.com.br Today we are posting here the new company, "… |
| 2025-04-23 | HELLO Citizens of the world ( BABUK locker ) | Hello World, have you forgotten us? we are now back for you. by BABUK … |
| 2025-04-23 | viacaojacarei.com.br | viacaojacarei.com.br |
| 2025-04-23 | gelco-s-a.com.br | gelco-s-a.com.br |
| 2025-04-23 | Kurosu & Co.SA - kurosu.com.py LEAKED | Kurosu & Co.SA - kurosu.com.py LEAKED |
| 2025-04-23 | zapopan.gob.mx LEAKED | zapopan.gob |
| 2025-04-23 | carc.gov.jo LEAKED | carc.gov |
| 2025-04-23 | nhbg.com.co LEAKED | nhbg |
| 2025-04-23 | APMS ( Advanced Physician Management Service LLC | APMS ( Advanced Physician Management Service LLC |
| 2025-04-23 | a top-tier law firm in Workers Compensation Defense! | a top-tier law firm in Workers Compensation Defense! |
| 2025-04-23 | precisediagnosticspacs.com | precisediagnosticspacs.com |
| 2025-04-23 | zetech.ac.ke admin access | zetech.ac.ke |
| 2025-04-23 | maxprofit.mcode.me admin access | maxprofit.mcode.me |
| 2025-04-23 | skopje.gov.mk admin access | skopje.gov.mk |
| 2025-04-23 | rtdc.gov.mn access admin | rtdc.gov.mn access |
| 2025-04-23 | pbos.gov.pk | pbos.gov.pk |
| 2025-04-23 | abd-ong.org | abd-ong.org |
| 2025-04-23 | mtgazeta.uz | mtgazeta.uz |
| 2025-04-23 | sincorpe.org.br | sincorpe.org.br |
| 2025-04-23 | pti.agency | pti.agency |
| 2025-04-23 | singularanalysts.com | singularanalysts.com |
| 2025-04-23 | gervetusa.com | gervetusa.com |
| 2025-04-23 | workers.com.zm | workers.com.zm |
| 2025-04-23 | wacer.com.au | wacer.com.au |
| 2025-04-23 | thebetareview.com | thebetareview.com |
| 2025-04-23 | senseis.xmp.net | senseis.xmp.net |
| 2025-04-23 | fpsc-anz.com | fpsc-anz.com |
| 2025-04-23 | mandiricoal.net | mandiricoal.net |
| 2025-04-23 | dealplexus.com | dealplexus.com |
| 2025-04-23 | bee-insurance.com | bee-insurance.com |
| 2025-04-23 | lamundialdeseguros.com | lamundialdeseguros.com |
| 2025-04-23 | indianaerospaceandengineering.com | indianaerospaceandengineering.com |
| 2025-04-23 | gstpam.org | gstpam.org |
| 2025-04-23 | www.shootinghouse.com.br | www.shootinghouse.com.br |
| 2025-04-23 | headwaterco.com | headwaterco.com |
| 2025-04-23 | www.al-shefafarm.ro | www.al-shefafarm.ro |
| 2025-04-23 | www.ykp.com.br LEAKED | www.ykp.com.br |
| 2025-04-23 | www.go4kora.tv | www.go4kora.tv |
| 2025-04-23 | www.rekamy.com | www.rekamy.com |
| 2025-04-23 | www.dvttechnologyltd.com | www.dvttechnologyltd.com |
| 2025-04-23 | www.siea.sk | www.siea.sk |