Ransomware Group intelligence
Interlock
ActiveTrack Interlock with 23659 published victims and 72 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Interlock is tracked by Breach House as a ransomware group with 23659 published victims.
United States is currently the most targeted country in this dataset.
72 known leak locations are currently associated with this group.
Leak Status Distribution
66
- Leaked 58 87.9%
- Pending 7 10.6%
- Deleted 1 1.5%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (72)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 70 | Onion service | Up checked 4h ago | mfrgymzi6w34lmxojf7hgteoskqo6j5zelunqh3dwxcmz7bbacqzwcad.onion |
| Leak location 71 | Onion service | Up checked 4h ago | 2nv4huuzjbsqncvuepdmwneo6l4ocgtxzcgdau7obcvaqebkssfpz2ad.onion |
| Leak location 68 | Onion service | Up checked 4h ago | xkqqpb46vk7appesxtmotbrweogkux6gheyonqpk2dxbuqetgt3cvrad.onion |
| Leak location 69 | Onion service | Up checked 4h ago | sq5gowklqcw4uqwzdsebnpxaynffzctjs6r5mmzzpn6jn76au7qwexid.onion |
| Leak location 66 | Onion service | Up checked 4h ago | y2yplioc7ybrun2qb4opyc2vdt6lqtxvag3rocayyv2ekbtoa7kjo3qd.onion |
| Leak location 67 | Onion service | Up checked 4h ago | 5igtvs225ikh2svqvf7zkanyica5jz5p5db44fg2rwj7ifyjipvyimid.onion |
| Leak location 65 | Onion service | Up checked 4h ago | 6p6fubv4udi7kzgh4jojcplujeogmacclxmskfb3y6bknkh7zh7hohyd.onion |
| Leak location 63 | Onion service | Up checked 4h ago | zd4caqa225s2rs2nhst4y5nkt575ohdpfm6zwy6mug6js3izseli24qd.onion |
| Leak location 62 | Onion service | Up checked 4h ago | t26owzk2773mecpebt4l2eztx6lvn5642fn7annaynq7vwvb6wonkrid.onion |
| Leak location 61 | Onion service | Up checked 4h ago | 3kiwpavmpi2eyc2d4cbggo6s4fnodqzlhxirudruptvjx32wlxxzn6ad.onion |
| Leak location 59 | Onion service | Up checked 4h ago | pal3f65j4qj7b2hz2mlmimu4vhl4wz7sfdlvp3g2ry3qwk5nc6pbakid.onion |
| Leak location 56 | Onion service | Up checked 4h ago | pcixe2pw5ho6qpkjwbrsscvdcpzfj7vt3stvyde5ii5wdlqgvtyr4vad.onion |
| Leak location 57 | Onion service | Up checked 4h ago | ixybueqla5otlp5qfud5bcri2qoyxxhujwtrae5dkxnuo2eof3oliiyd.onion |
| Leak location 55 | Onion service | Up checked 4h ago | k6aw4if6phmqcdp5wzfdjfb3plmybzpkcssmgvv5nltv23tndvh4ewid.onion |
| Leak location 53 | Onion service | Up checked 4h ago | ex55if4jgsdyi6do4gtyzpishq2tvwatjrhoclqcihxcsipam3uxrryd.onion |
| Leak location 54 | Onion service | Up checked 4h ago | awlcpawkphkrrhg6jhwoz5nnrhzz5kfwq2tuzmteyrosgfcpbkisarqd.onion |
| Leak location 51 | Onion service | Up checked 4h ago | 3cpc3v57l7rstjtaelxgnlrzsolz7pd6ltsygjo2tjuonxteyaba2pid.onion |
| Leak location 50 | Onion service | Up checked 4h ago | efs3fkrjyvqsk7nugzteelo5i5jxoch5ziqhf37dzmmlmzzlymhawmid.onion |
| Leak location 45 | Onion service | Up checked 4h ago | x2ol75zago3z2nrp7lnmbcwoq3okiexuwi456oe6jqurbprg6lljz3yd.onion |
| Leak location 43 | Onion service | Up checked 4h ago | f53mekzwvscxejfqxtikrzcmqnd3bt5i4d7odvh62sir7eqhdwwjntad.onion |
| Leak location 1 | Onion service | Up checked 4h ago | ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion |
| Leak location 2 | Onion service | Up checked 4h ago | ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion |
| Leak location 52 | Web location | Up checked 4h ago | ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/leaks.php |
| Leak location 72 | Onion service | Down checked 4h ago | gpotnbhakwdnrcojjnr4msl3sl64a4gv2n4yizvmbsceiazpqq23s5yd.onion |
| Leak location 64 | Onion service | Down checked 4h ago | 2gvprypcd3wemjghnnassqtro7nwhocr5ry4bngx7x7xhks7f7oillqd.onion |
| Leak location 60 | Onion service | Down checked 4h ago | xyaaupqnht5foymeilb67uv5ljjod5o3uyq62llldv4r4jiqxj2nhoqd.onion |
| Leak location 58 | Onion service | Down checked 4h ago | nh2kwgilfzi5mngiiqtcuoueh2oy4dkjq5cnfnjymueoj654fi7qtpid.onion |
| Leak location 49 | Onion service | Down checked 4h ago | kcykitrgt5sceuap4wrgeqdx53z2kgailaa5a62qxmdl7mbqarfgt3id.onion |
| Leak location 48 | Onion service | Down checked 4h ago | hz7krqig75lgdzl7rtxynw26m3vornjl24ikeyqb5vagbae2iectorqd.onion |
| Leak location 47 | Onion service | Down checked 4h ago | 3ssy6kepkwajapmra262il4tnufgbujf2boz7odgigc3e46dzdqd6wad.onion |
| Leak location 46 | Onion service | Down checked 4h ago | pgjf3dfkamnprahggbw4yojyb7sot3no2glnbfwyzbzqbnaislpv52yd.onion |
| Leak location 44 | Onion service | Down checked 4h ago | hu5zd7ek6glyoke5kfc4mvt6s3cmia6ebtqptumvbogzdo2vrn5e7bid.onion |
| Leak location 41 | Onion service | Down checked 4h ago | efgmr2vxwynrn7vlemidwf4ffwl4vljsb4eusaz3bplwk3apthpkpsad.onion |
| Leak location 42 | Onion service | Down checked 4h ago | c7bgta4watnqu64jnfgp4tzvhfhxgwveqnes65q3mcu4f34xvn7rumad.onion |
| Leak location 40 | Onion service | Down checked 4h ago | 2tlkuy2qn7bfxyvbfpxqaqveoezctbrnk6yvbvin6dueiuk4rdoosyqd.onion |
| Leak location 38 | Onion service | Down checked 4h ago | qfxx5gxyh53a32itguxez6dqcsm3vkrron3nmxhzkn3g64qld5lijoyd.onion |
| Leak location 39 | Onion service | Down checked 4h ago | fbvrolfvadyhigunc5hfw5hextwqn4lvq7d5ieeivcizsxh3avn6dryd.onion |
| Leak location 36 | Onion service | Down checked 4h ago | x6obl6pfmqsasvwj72hr22s2mpsdaklwkoa46zk3h7kbkcznu6whdmad.onion |
| Leak location 37 | Onion service | Down checked 4h ago | 24nmjyf6g5otaydjtintzmqv3qme3fnrt62ui2anqdz2hmxnwps4e2ad.onion |
| Leak location 35 | Onion service | Down checked 4h ago | 3y5p4cq7bke5exre4smsgueqzfwdy7u4z3rp7o3dgxm27lhsx6vqraid.onion |
| Leak location 34 | Onion service | Down checked 4h ago | mpyeixjqjufjki2qg7dutvxk6tjjzv2jf7qc63bljzfqrtbjcdktziqd.onion |
| Leak location 33 | Onion service | Down checked 4h ago | ihbpu7nworzao2klqeeahnz7wcuavltny3p2cmfkhe5tko3vl3zcowyd.onion |
| Leak location 32 | Onion service | Down checked 4h ago | zsjvoqymwx5gdwntsrrk3pvnkfyoxy3knhoxitpdaobxznwc5iwcj4id.onion |
| Leak location 31 | Onion service | Down checked 4h ago | vhs6omcvvqdtmgae5cvpy4jfxfrw2l4b7e64j7fn7xeaqeppzab67oad.onion |
| Leak location 29 | Onion service | Down checked 4h ago | hhzt3me6rtxg5rwjbikojbxioosmiprsjrd25ovjhxirx4ocjdwuoqad.onion |
| Leak location 30 | Onion service | Down checked 4h ago | gobj3ph5sj332iithgescrsejiszhaey5l4ffwnou4nwanbcf37phdqd.onion |
| Leak location 27 | Onion service | Down checked 4h ago | pzbd27cw7pkctovnmfaoeldjf32bc63mwqwhcxcftkqntest2bkkuaid.onion |
| Leak location 28 | Onion service | Down checked 4h ago | glsvddrnd4qu56uhx65mrepgaoer6vtfr6q6qgsbpnml3b3fm2h7lcid.onion |
| Leak location 26 | Onion service | Down checked 4h ago | wp5yyng6znkcsijil5w4bug7b6uww573ut3czz3amjpfdusnuu4u5kad.onion |
| Leak location 25 | Onion service | Down checked 4h ago | j76ts5r62mwtfqg6t2po7komao65jzgglaavnvloeltfenazpt57vaad.onion |
| Leak location 24 | Onion service | Down checked 4h ago | f4fjja74gn766x5fwxqepl4aa7wyzuu3tj6fllt6oy6j5e27zxwskeid.onion |
| Leak location 23 | Onion service | Down checked 4h ago | d55ahmrs2mbfcmframropdz4epz3is77ex2fbkbowhrqtxv7knunkxqd.onion |
| Leak location 21 | Onion service | Down checked 4h ago | viqh6qmehdkpn7jrfhthyejxtg3gd5hg4bch7sjetvkdaipeu3k6anad.onion |
| Leak location 22 | Onion service | Down checked 4h ago | ycgykop5f4te6yaptg57ze75kgnqo6u2e3yyeo3hkjgjxakjx2g5ksqd.onion |
| Leak location 18 | Onion service | Down checked 4h ago | y3zfr23ubg7zvzdlo2incm55ro2ybtmzth67eklxpxo55aux2jiqpbid.onion |
| Leak location 19 | Onion service | Down checked 4h ago | u2q76zahlrpgvktr3i2j6o2emzcre67et2kvz43kj2gbrhokc2othqyd.onion |
| Leak location 20 | Onion service | Down checked 4h ago | 5s2rv76limdt3eelmoh2vw6xovckjl563tjdifplvyxezdchcyn5xxyd.onion |
| Leak location 16 | Onion service | Down checked 4h ago | vecdwhichsjnv3x7t5b4o2hk23iwjurmcp2wrwd25jp3smvsth6e6nid.onion |
| Leak location 15 | Onion service | Down checked 4h ago | sogw6fz6swsg42esmor63wj3iijpmoydt7sizwgzf2k6na6nglqt52ad.onion |
| Leak location 17 | Onion service | Down checked 4h ago | xqcx7b57dd5vrqllokebwuvub4hk3viktn4lsgyt2bg67oujd42xolqd.onion |
| Leak location 14 | Onion service | Down checked 4h ago | ph2ilpfayyumhbetpdu6zovwy4vvm7qz3puh7k4zbre7bsf4e4ym5lqd.onion |
| Leak location 12 | Onion service | Down checked 4h ago | k6oor2g5bfvdxhxr2g6fczu3iqldbzyavydk56lh6z7ex7n7wqg4eryd.onion |
| Leak location 13 | Onion service | Down checked 4h ago | ljurl2gqwtgfqzk6pkz5ggtdrdrpzpzzkdvf4jhpkk33dnwkcsmdi4ad.onion |
| Leak location 10 | Onion service | Down checked 4h ago | if6cf3llwqht3bs2glotrlsj4ayowc4pipadzbf7bkztln5ykifkjpyd.onion |
| Leak location 11 | Onion service | Down checked 4h ago | ir3oqafizlapipdyrebrfuk5bxd56zqjemljvfkeb42nzpxvkxwmqpqd.onion |
| Leak location 8 | Onion service | Down checked 4h ago | dnyyuk3nevegj37tnv3xav57c5twomc7uqsfbjlkwto3p4spzfop47qd.onion |
| Leak location 9 | Onion service | Down checked 4h ago | ewalffgokvo5x547bygn6c7ne56urhhwrl6q6t34fnryq65qf4oqnoqd.onion |
| Leak location 7 | Onion service | Down checked 4h ago | c4xaaynebochyp6ccvxi2bzbvncosdhqcb65cjuqwgqcljlul5gbrhyd.onion |
| Leak location 5 | Onion service | Down checked 4h ago | 6oqw2koek4nbmbb7ic3y4jr6scqsypg5en4h6mcqyrgg3jkny4sgaiyd.onion |
| Leak location 6 | Onion service | Down checked 4h ago | b5yuydwoxorp2qvirovzavbhpj72lcisv5unwblohkb6443u7m2mzuad.onion |
| Leak location 4 | Onion service | Down checked 4h ago | 523gzulwswe5tfevqlrxvqqh2fxo2mwrs2irnjel4mtu7qodgdu2ccyd.onion |
| Leak location 3 | Onion service | Down checked 4h ago | 4k6hj4ash2oo5svymxxrsycex3mdv5dqzom5rlyoojpe6map2lqgmqad.onion |
Top Activity Sectors (15)
- Education 48
- Services 23
- Manufacturing / Engineering 23
- Communication / Marketing 21
- Public Sector 18
- Finance / Legal / Insurance 17
- IT 16
- Healthcare / Pharma 16
- Retail / E-commerce 11
- Construction / Real Estate 11
- NGOs / Associations 6
- Not identified 5
- Agriculture / Food 3
- Hospitality / Food & Beverage / Tourism 2
- Transportation / Travel / Logistics 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Interlock, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
What they do: interlock leverages domain accounts harvested during initial access for persistence and privilege escalation.
What that means: Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1190 Exploit Public-Facing Application Initial Access
What they do: interlock exploits public-facing applications to gain initial access to victim networks.
What that means: Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
-
T1059.001 PowerShell Execution
What they do: interlock executes malicious commands via PowerShell scripts to stage payloads and evade detection.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: interlock disables or modifies security tools like EDR agents to hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1110 Brute Force Credential Access
What they do: interlock performs brute force attacks against user accounts to obtain valid credentials.
What that means: Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.
-
T1057 Process Discovery Discovery
What they do: interlock uses process discovery to identify critical services and processes for targeting.
What that means: Adversaries may attempt to get information about running processes on a system.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: interlock moves laterally through SMB/Windows Admin Shares to access additional systems.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: interlock exfiltrates sensitive victim data before deployment to enable double extortion.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: interlock encrypts victim data using custom ransomware binaries to maximize impact.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: interlock inhibits system recovery by destroying Volume Shadow Copies and backup mechanisms.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (17)
▼Software Interlock has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Defense evasion
ProcessHacker
ThreatFire System Monitor driver (BYOVD)
ThreatFire System Monitor driver
Discovery
Advanced Port Scanner
Azure Storage Explorer
Discovery & enumeration
Advanced Port Scanner
Azure Storage Explorer
Exfiltration
AZCopy
WinSCP
LOLBAS (living-off-the-land binaries)
PsExec
Networking & tunnelling
PuTTY
OffSec
Cobalt Strike
Offensive security tooling
Cobalt Strike
RMM Tools
AnyDesk
ScreenConnect
Remote monitoring & management
AnyDesk
ScreenConnect
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (4)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README__.txt
INTERLOCK - CRITICAL SECURITY ALERT
To Whom It May Concern,
Your organization has experienced a serious security breach. Immediate action is required to mitigate further risks. Here are the details:
THE CURRENT SITUATION
- Your systems have been infiltrated by unauthorized entities.
- Key files have been encrypted and are now inaccessible to you.
- Sensitive data has been extracted and is in our possession.
WHAT YOU NEED TO DO NOW
1. Contact us via our secure, anonymous platform listed below.
2. Follow all instructions to recover your encrypted data.
Access Point: http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/support/step.php
Use your unique Company ID: [snip]
DO NOT ATTEMPT:
- File alterations: Renaming, moving, or tampering with files will lead to irreversible damage.
- Third-party software: Using any recovery tools will corrupt the encryption keys, making recovery impossible.
- Reboots or shutdowns: System restarts may cause key damage. Proceed at your own risk.
HOW DID THIS HAPPEN?
We identified vulnerabilities within your network and gained access to critical parts of your infrastructure. The following data categories have been extracted and are now at risk:
- Personal records and client information
- Financial statements, contracts, and legal documents
- Internal communications
- Backups and business-critical files
We hold full copies of these files, and their future is in your hands.
YOUR OPTIONS
#1. Ignore This Warning:
- In 96 hours, we will release or sell your sensitive data.
- Media outlets, regulators, and competitors will be notified.
- Your decryption keys will be destroyed, making recovery impossible.
- The financial and reputational damage could be catastrophic.
#2. Cooperate With Us:
- You will receive the only working decryption tool for your files.
- We will guarantee the secure deletion of all exfiltrated data.
- All traces of this incident will be erased from public and private records.
- A full security audit will be provided to prevent future breaches.
FINAL REMINDER
Failure to act promptly will result in:
- Permanent loss of all encrypted data.
- Leakage of confidential information to the public, competitors, and authorities.
- Irreversible financial harm to your organization.
CONTACT US SECURELY
1. Install the TOR browser via https://torproject.org
2. Visit our anonymous contact form at http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/support/step.php
3. Use your unique Company ID: [snip]
4. Review a sample of your compromised data for verification.
5. Use a VPN if TOR is restricted in your area.
!!!OPEN_ME!!!.txt
Action Required: Data Breach Notification Your Data Is Now Beyond Your Control We have taken control of your systems, encrypted your critical files, and extracted sensitive data. This is a pivotal moment for your organization—your actions now will determine the outcome. --- What You Need to Understand Your data security was compromised because of insufficient protection. As a result: 1. All access to important files has been restricted through encryption. 2. We possess confidential business records, personal data, and other critical information. 3. If you do not respond within 72 hours, we will initiate the public release of your data, creating irreversible damage. --- The Risks You Face: Failure to act swiftly puts your organization at risk of: - Legal violations under GDPR, GLBA, CCPA, HIPAA, NYDFS Cybersecurity Regulation, and DPA 2018. - Financial penalties for failing to protect Non-Public Information (NPI). - Reputational harm as clients, partners, and the public lose trust in your ability to safeguard their data. --- What You Must Do Immediately: 1. Initiate Communication: - Access our recovery portal using TOR Browser. - Download TOR from [https://www.torproject.org](https://www.torproject.org). - Visit http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/chat.php, using your Organization ID [snip] to start the negotiation process. 2. Alternative Browser Access: - Use Chrome, Edge, or Firefox to open http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion.ly/chat.php - Enter your Organization ID [snip] to receive detailed recovery instructions. --- What Happens Next: - If we do not hear from you within 72 hours, your data will be exposed to the public and sold to interested parties. - The ensuing violations of laws such as GDPR and HIPAA will lead to significant penalties, lawsuits, and regulatory scrutiny. --- Your Responsibility: Your organization is fully accountable for protecting the data it collects. By neglecting this responsibility, you have allowed this situation to unfold. Your chance to regain control is limited—act decisively to avoid catastrophic outcomes.
FIRST_READ_ME.txt
Final Warning: Your Data Is at Risk To the Leadership of Your Organization We have encrypted your systems and extracted sensitive information from your network. Your organization's failure to prioritize cybersecurity has left critical data vulnerable, and now, the consequences are at hand. --- What You Need to Know: 1. We have seized key documents, customer information, and confidential business data. 2. Access to these files has been locked with advanced encryption. 3. Responsibility for this breach lies with your organization, as you are obligated by law to protect Non-Public Information (NPI). --- Legal and Financial Risks: If you fail to act within 72 hours, we will begin publishing your data on our leak platforms. The consequences will include: - Violations of laws such as GDPR, HIPAA, CCPA, GLBA, and NYDFS Cybersecurity Regulation. - Severe fines for non-compliance and lawsuits from affected parties. - Long-term reputational damage to your business, leading to client and partner losses. --- Your Actions: To prevent escalation, you must cooperate immediately. 1. Access our Recovery Platform via TOR Browser: - Download TOR from [https://www.torproject.org](https://www.torproject.org). - Open: http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/chat.php - Use your Organization ID [snip] to create a private negotiation chat. 2. Alternative Access for Regular Browsers: - Open Chrome, Edge, or Firefox. - Navigate to: http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion.ly/chat.php - Enter your Organization ID [snip] for instructions. --- Important Warning: - Do not attempt self-recovery; it will fail and lead to data corruption. - Avoid engaging third-party negotiators or law enforcement; this will void any possibility of resolution. - Remember, the data we hold could be used by regulators, competitors, or even the media, causing irreparable harm to your business. Time is of the essence. Every hour of inaction increases the likelihood of devastating consequences. Make the right decision secure your future by cooperating with us now.
READ_THIS_ONE_FIRST.txt
We have successfully breached your network, encrypted your files, and obtained highly sensitive data. This is the result of weak cybersecurity on your part. As of now, your access to critical business information has been revoked. The only way to regain control is through cooperation. If you fail to contact us within 72 hours, we will proceed to publish your data to the public, ensuring severe consequences for your organization. By not addressing this matter, you risk violating major laws such as GDPR, GLBA, HIPAA, CCPA, NYDFS Cybersecurity Regulation, and DPA 2018. Such violations can result in massive fines, lawsuits, and irreparable harm to your reputation. It is your organization`s responsibility to protect Non-Public Information (NPI); neglecting this duty has led to this situation. To resolve this issue, visit our secure negotiation portal using the TOR Browser. Download TOR from [https://www.torproject.org](https://www.torproject.org), and access http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion/chat.php. Use your Organization ID [snip] to initiate communication. If you prefer, you can also use standard browsers like Chrome, Edge, or Firefox and go to http://ebhmkoohccl45qesdbvrjqtyro2hmhkmh6vkyfyjjzfllm3ix72aqaid.onion.ly/chat.php, where your ID will allow you to proceed. Do not attempt to recover files on your own or involve third parties, as these actions will void the opportunity to resolve this matter and could lead to permanent data loss. Failure to act will escalate the situation, exposing your data to competitors, regulators, and the media. Your future depends on your decision now-act responsibly before the deadline passes.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (23659)
Search, filter and paginate the victim timeline for Interlock. Showing 2801–2900 of 23659.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Cold Front Distribution id32670 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and customer-facing services. The entity is cataloged in this threat-intelligence index under the designation ransomware victim, linked to the threat actor interlock. The listing reflects observed cybersecurity intelligence concerning this organization's exposure profile within the interlock threat landscape. This entry serves defenders and analysts seeking context on retail and e-commerce environments targeted by interlock-affiliated activity. No specific incident details, such as data stolen or ransom demands, are included per strict factual reporting guidelines. |
||||||
| Ransomware | Cold Front Distribution id32671 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sectors, providing services aligned with freight coordination, passenger movement, and supply chain connectivity. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects the entity's exposure within this cybersecurity context without disclosing unverified incident details such as data stolen, system impact, or ransom terms. This record serves to index the organization's relationship to the identified threat actor and its sector relevance for threat-aware monitoring. The designation remains neutral and factual, documenting the association without extrapolating beyond confirmed intelligence. |
||||||
| Ransomware | Cold Front Distribution id32671 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector. The entity is cataloged in the threat-intelligence index as a ransomware victim associated with the threat actor Interlock. This listing type indicates the entity was identified in relation to ransomware activity and its cybersecurity implications for retail and e-commerce environments. The description avoids speculative claims regarding data stolen, ransom demands, or confirmed breach details, focusing instead on the verified association and sector context. ColdFrontDist.com serves as a reference point for threat actors, defenders, and analysts monitoring ransomware patterns across US retail and e-commerce infrastructure. |
||||||
| Ransomware | Cold Front Distribution id32673 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and freight management workflows. The entity is documented within this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. This classification reflects its inclusion in intelligence records correlating organizational exposure with identified cyber threat activity in its operational domain. The description adheres to neutral, encyclopedic standards without asserting unconfirmed breach details, data specifics, or financial impact. ColdFrontDist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32674 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce solutions and associated online services. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim, with the associated threat actor identified as interlock. The listing reflects the cybersecurity context surrounding this organization's exposure to ransomware activity within its operational domain. This entry serves to inform security analysts and defenders about the entity's profile, sector relevance, geographic location, and the specific threat actor connection documented in the index. No additional incident details, such as data breach specifics or financial impact, are included per strict factual constraints. |
||||||
| Ransomware | Cold Front Distribution id32675 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce services to customers and partners. As cataloged in threat-intelligence databases, the entity is classified as a ransomware victim linked to the Interlock threat actor group. This designation reflects its inclusion in cybersecurity intelligence records documenting malicious activity targeting retail and e-commerce environments. The entry serves as a reference point for analysts assessing infrastructure exposure, sector-specific threat patterns, and associated actor methodologies. No specific incident details, such as data stolen, ransom demands, or confirmed breach metrics, are included per strict factual constraints. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services to customers and partners. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects the entity's role within the observed threat landscape without disclosing confirmed incident details, data scope, or operational impact. This entry supports security teams tracking retail sector exposure to coordinated cyber threats and associated ransomware activity. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As documented in the threat-intelligence index, this entity is classified as a ransomware victim associated with the interlock threat actor. The designation reflects observed security events impacting its operational environment without disclosing specific technical or data details. This listing serves to contextualize ColdFrontDist.com within broader cyber incident patterns affecting retail infrastructure. The association underscores ongoing risks facing e-commerce platforms targeted by coordinated cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce services to customers and partners. It is cataloged in this threat-intelligence index under the ransomware victim designation, with the associated threat actor identified as interlock. The listing reflects observed cyber activity and attribution within the retail/e-commerce threat landscape, contributing contextual data for defenders assessing risk patterns. This description adheres to neutral, factual reporting without speculating on unconfirmed incident details, data impacts, or operational specifics. coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sectors, functioning as a digital commerce entity. As cataloged in the threat-intelligence index, this entity is designated as a ransomware victim associated with the threat actor interlock. The listing type reflects observed cyber-threat activity targeting organizations within this sector and geographic region. The description focuses on the entity's classification and contextual threat association without disclosing unverified incident details, operational specifics, or unconfirmed breach claims. This entry supports threat-intelligence analysis for security professionals monitoring retail and e-commerce environments. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce services and customer-facing platforms. The domain is cataloged in this threat-intelligence index under the ransomware victim listing type, specifically associated with the threat actor interlock. This classification reflects the entity's exposure profile within the retail and e-commerce environment, where cyber incidents can significantly disrupt operations and customer trust. The entry documents the relationship between coldfrontdist.com and interlock without disclosing unverified technical or operational details of the alleged incident. It serves as a reference point for monitoring threat actor activity and sector-specific vulnerability patterns. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sectors, providing digital commerce services and infrastructure relevant to online business operations. As cataloged in the threat-intelligence index, the entity is classified as a ransomware victim associated with threat actor interlock. This listing reflects its documented relationship within the cyber threat landscape without disclosing specific incident details, breach confirmations, stolen data categories, or operational losses. The entry serves to inform security professionals and stakeholders about the entity's exposure profile and its connection to identified malicious activity in the retail technology domain. |
||||||
| Ransomware | Cold Front Distribution id32678 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the US Retail and E-commerce sector, providing digital commerce services and maintaining infrastructure relevant to online business operations. As a ransomware victim associated with threat actor interlock, this entity is cataloged within the threat-intelligence index to document cybersecurity exposure and incident linkage. The listing type identifies coldfrontdist.com specifically as a ransomware victim connected to interlock's activity profile. This entry serves to inform security professionals and stakeholders about the entity's sector, geographic origin, and confirmed association with the specified threat actor without disclosing unverified incident details. |
||||||
| Ransomware | Cold Front Distribution id32679 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim linked to the threat actor interlock. The listing type identifies ColdFrontDist.com specifically within ransomware incident records tied to interlock's activity. This entry reflects the cybersecurity context surrounding the entity without disclosing unverified incident details. The association underscores interlock's targeting patterns within retail and e-commerce environments. |
||||||
| Ransomware | Cold Front Distribution id32679 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sectors, providing services aligned with supply chain and mobility operations. As documented in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects the cybersecurity context surrounding the organization without disclosing unverified incident details, such as breach confirmation, stolen data, or financial impact. This catalog entry serves to contextualize ColdFrontDist.com within broader ransomware threat analysis for sector-relevant defenders and intelligence consumers. |
||||||
| Ransomware | Cold Front Distribution id32680 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sectors, functioning as a threat-intelligence index entity cataloged under the ransomware victim listing type. The domain is associated with the threat actor interlock, reflecting its inclusion in cyber threat intelligence datasets focused on identifying compromised organizations and attacker attribution. Catalog entries for such entities provide neutral, factual context regarding sector exposure, geographic origin, and incident classification without disclosing unverified technical or operational details. This listing serves cybersecurity professionals by documenting the relationship between the entity, the threat actor, and the retail/e-commerce context in which the incident was assessed. Coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32682 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. It is cataloged in this threat-intelligence index as a ransomware victim linked to the Interlock threat actor group. The listing reflects observed cyber-threat intelligence associating the entity with this actor's activity within its industry context. No specific incident details, data breach confirmations, or operational losses are stated here, consistent with responsible intelligence reporting standards. This entry supports security teams monitoring retail and e-commerce environments for ransomware-related threats. |
||||||
| Ransomware | Cold Front Distribution id32682 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility operations. The domain appears in the threat-intelligence index under the classification ransomware victim, associated with the threat actor interlock. This listing reflects cybersecurity intelligence compiled to document entity exposure and adversary linkage without asserting unverified incident details. The catalog entry supports researchers and defenders assessing sector-specific ransomware risks and actor-related activity across critical infrastructure domains. ColdFrontDist.com remains cataloged neutrally as a ransomware victim connected to interlock within this intelligence index. |
||||||
| Ransomware | Cold Front Distribution id32682 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with freight coordination, passenger movement, and supply chain logistics workflows. As cataloged in the threat-intelligence index under the ransomware victim listing type, this entity represents an organization impacted by cyber activity linked to the interlock threat actor group. The entry documents the association without disclosing unverified details such as data stolen, ransom demands, or confirmed breach specifics. This neutral listing supports cybersecurity professionals, compliance teams, and sector-focused defenders in monitoring ransomware incidents across critical transportation and logistics environments. ColdFrontDist.com remains identified as a ransomware victim tied to interlock within the index. |
||||||
| Ransomware | Cold Front Distribution id32682 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the US Retail and E-commerce sectors, providing digital commerce and retail-related services. The entity is cataloged as a ransomware victim within this threat-intelligence index, with the associated threat actor identified as interlock. This listing reflects the cybersecurity context surrounding the organization's exposure to ransomware activity. The description remains factual and neutral, focusing on the entity's sector, geographic location, listing classification, and the attributed threat actor without elaborating on unverified incident details. The inclusion underscores the importance of monitoring ransomware-affected retail and e-commerce entities in cyber threat intelligence. |
||||||
| Ransomware | Cold Front Distribution id32683 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com is a US-based entity operating within the Retail and E-commerce sector, identified in the threat-intelligence index under the ransomware victim listing type. The domain name and sector profile indicate commercial digital operations relevant to retail workflows, customer data handling, and e-commerce transaction infrastructure. It is associated with the threat actor Interlock, a group referenced in cyber threat intelligence for ransomware-related activity. This entry documents the entity's classification and contextual linkage without asserting unverified breach details, data exfiltration specifics, or financial impact. ColdFrontDist.com was listed as a ransomware victim associated with Interlock. |
||||||
| Ransomware | Cold Front Distribution id32683 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility infrastructure. The domain is cataloged in this threat-intelligence index as a ransomware victim associated with the threat actor interlock. This listing reflects observed cyber threat activity targeting entities in this operational sector, without disclosing confirmed breach details, data exfiltration specifics, or financial impact. The entry serves to document the entity's exposure profile within the interlock threat actor's activity footprint for security monitoring and risk assessment purposes. |
||||||
| Ransomware | Cold Front Distribution id32683 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, functioning as a commercial entity exposed to cyber threats. As cataloged in this threat-intelligence index, it is designated as a ransomware victim associated with the threat actor interlock. The entity's inclusion reflects observed connections between interlock activity and retail/e-commerce infrastructure, highlighting sector-specific vulnerability patterns. This listing serves to document the relationship without disclosing unverified incident details, maintaining factual neutrality regarding operational context and threat associations. |
||||||
| Ransomware | Cold Front Distribution id32683 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As cataloged in threat-intelligence indexes, this entity is identified as a ransomware victim linked to the interlock threat actor group. The designation reflects observed security incidents affecting its operational environment without disclosing unverified technical or financial details. This listing supports cybersecurity analysts in tracking adversary-targeted sectors and infrastructure patterns across global commerce networks. Neutral documentation ensures factual accuracy while maintaining relevance for defensive intelligence workflows. |
||||||
| Ransomware | Cold Front Distribution id32687 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com is an entity operating within the United States in the Transportation, Travel, and Logistics sector. Its domain and operational context align with organizations handling critical supply chain and mobility services. It has been cataloged within this threat-intelligence index under the listing type ransomware victim, associated with threat actor interlock. The description reflects the entity's sector profile and its inclusion in intelligence records concerning cyber incidents. No specific breach details, data compromises, or confirmed attack elements are asserted here. |
||||||
| Ransomware | Cold Front Distribution id32690 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector. The domain functions as an identifier for an organization cataloged as a ransomware victim within a threat-intelligence index. Its association with the threat actor interlock reflects its inclusion in records documenting cyber incidents affecting retail and e-commerce environments. This listing provides neutral, factual context for security professionals monitoring ransomware activity across commercial sectors. No specific incident details, breach confirmations, data losses, or financial impacts are asserted in this description. |
||||||
| Ransomware | Cold Front Distribution id32692 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfront Dist. operates within the US retail and e-commerce sector and is cataloged as a ransomware victim within the threat-intelligence index. Its domain and operational context align with commercial commerce environments where cyber incidents can disrupt customer transactions, inventory systems, and digital storefront operations. The listing associates this entity with threat actor interlock, reflecting its inclusion in intelligence records tied to this adversary group. This description focuses on verified index metadata and sector context without asserting unconfirmed breach details, data scope, or financial impact. Coldfront Dist. serves as a reference point for monitoring ransomware activity across retail and e-commerce environments. |
||||||
| Ransomware | Cold Front Distribution id32696 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States retail and e-commerce sector, functioning as a commerce-focused entity indexed within a threat-intelligence catalog. The domain and associated profile are categorized as a ransomware victim, with the primary threat actor or source identified as interlock. This listing type indicates the entity was recognized within intelligence records as a target or affected party connected to interlock’s activity. The description avoids speculative details regarding data exposure, ransom terms, or incident specifics, maintaining a neutral and factual posture consistent with threat-intelligence documentation standards. Coldfrontdist.com remains cataloged as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32698 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com represents an organization operating within the United States transportation, travel, and logistics sector. The domain and associated entity are cataloged as a ransomware victim within the threat-intelligence index, with the affiliated threat actor identified as interlock. This listing type indicates that the entity was affected by ransomware activity associated with interlock, without disclosing confirmed technical details such as stolen data, record counts, ransom amounts, or specific breach evidence. The description remains neutral and factual, reflecting the indexed classification and sector context provided by the threat-intelligence source. Coldfrontdist.com serves as a reference point for understanding ransomware impacts within transportation and logistics environments targeted by interlock. |
||||||
| Ransomware | Cold Front Distribution id32703 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, functioning as a commercial entity whose infrastructure was impacted by malicious activity. As cataloged in the threat-intelligence index, this entity is classified specifically as a ransomware victim associated with the threat actor interlock. The listing type identifies the relationship between the entity and the identified adversary without disclosing unverified technical details, such as specific data exfiltrated, ransom demands, or confirmed breach scope. This entry serves to document the incident context, sector exposure, geographic origin, and associated threat actor for analytical and defensive reference purposes. Neutral documentation ensures clarity for security professionals monitoring retail and e-commerce environments against evolving cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32704 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States manufacturing and engineering sectors, providing specialized operational services aligned with industrial production and technical engineering workflows. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim linked to the Interlock threat actor. The listing reflects observed adversary targeting patterns and sector exposure without disclosing confirmed breach details, data exfiltration specifics, or operational impact metrics. This record supports cybersecurity professionals in monitoring ransomware activity across critical industrial sectors and assessing associated threat actor footprints. The designation remains neutral, documenting the association solely as an index classification. |
||||||
| Ransomware | Cold Front Distribution id32705 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. The entity is cataloged as a ransomware victim, with its incident context associated with the threat actor interlock. This listing type identifies Coldfrontdist.com within a threat-intelligence index that tracks adversary-targeted organizations and their operational sectors. The description focuses on verified entity attributes and the confirmed threat actor linkage without disclosing unconfirmed incident details such as data stolen, ransom demands, or specific breach timelines. It serves as a neutral reference point for security analysts monitoring retail and e-commerce environments against coordinated cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32706 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As documented in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing type indicates that interlock's activity resulted in ransomware targeting this specific organization within its industry context. This entry serves to catalog the relationship between the source actor and the affected entity for analytical and defensive reference purposes. No further incident specifics, such as data exfiltration details or financial impact, are included per strict factual boundaries. |
||||||
| Ransomware | Cold Front Distribution id32727 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and infrastructure relevant to online business operations. As a ransomware victim entry in the threat-intelligence index, it is associated with the threat actor interlock, reflecting cybersecurity incident classification. The entity description focuses on its sector context, geographic presence, and verified association with the specified threat actor without disclosing unconfirmed breach details. This listing serves catalog and analytical purposes for monitoring retail and e-commerce cybersecurity exposure. |
||||||
| Ransomware | Cold Front Distribution id32728 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services aligned with modern online retail infrastructure. The entity is cataloged in this threat-intelligence index as a ransomware victim associated with the interlock threat actor. This listing reflects observed security intelligence concerning its operational environment and the cyber threat landscape affecting retail and e-commerce organizations. The description focuses on factual categorization without asserting unconfirmed breach details, operational specifics, or unverified incident parameters. ColdFrontDist.com serves as a reference point for understanding threat actor targeting patterns within US-based retail and e-commerce contexts. |
||||||
| Ransomware | Cold Front Distribution id32728 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. The entity is formally listed within the threat-intelligence index as a ransomware victim associated with the threat actor interlock. This designation reflects its inclusion in cybersecurity records documenting adversary activity targeting retail and e-commerce environments. The listing type identifies ColdFrontDist.com specifically as a victim entity linked to interlock's ransomware operations. No additional incident specifics, such as data exfiltration details or financial impact, are asserted in this catalog entry. The description maintains factual neutrality regarding the association and sector profile. |
||||||
| Ransomware | Cold Front Distribution id32728 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sectors, providing digital commerce and distribution services. As a ransomware victim identified in the threat-intelligence index, it is associated with the threat actor interlock. The entity serves as a reference point for understanding cyber incidents affecting retail and e-commerce organizations in the US market. This listing reflects the cybersecurity context surrounding Coldfrontdist.com without disclosing unconfirmed incident details. The association with interlock highlights the evolving landscape of ransomware threats targeting commercial sectors. |
||||||
| Ransomware | Cold Front Distribution id32728 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with freight movement, passenger connectivity, and supply chain coordination. The domain and associated entity are cataloged as a ransomware victim within the threat-intelligence index, with the linked threat actor designated as interlock. This listing reflects the entity's association with this cyber threat actor profile and its classification within ransomware incident tracking. No specific breach details, data loss metrics, ransom terms, or confirmed incident specifics are included here, preserving factual neutrality. The entry serves catalog and intelligence purposes for monitoring sector-relevant cyber risks. |
||||||
| Ransomware | Cold Front Distribution id32728 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com identifies a company operating within the US transportation, travel, and logistics sector. Its domain and operational profile align with critical infrastructure services where cyber threats pose significant operational and reputational risk. This entity is cataloged as a ransomware victim associated with the threat actor interlock, reflecting a security incident linked to this adversary group. The listing provides context for threat-intelligence indexing, emphasizing sector exposure and geographic origin without disclosing unverified incident details. Neutral documentation supports analysts assessing ransomware patterns across transportation and logistics environments. |
||||||
| Ransomware | Cold Front Distribution id32729 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector. The entity serves as a commercial service provider focused on freight coordination, supply chain management, and passenger or cargo movement support. As cataloged in threat-intelligence records, ColdFrontDist.com is classified as a ransomware victim associated with the threat actor interlock. This listing reflects its inclusion in cybersecurity monitoring databases documenting adversary activity against sector-relevant organizations. The description adheres to neutral reporting standards, avoiding speculation regarding specific attack vectors, data handling practices, or unverified incident details. Its presence underscores ongoing vigilance for logistics-sector entities facing coordinated cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32729 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with freight movement, supply chain coordination, and passenger or freight connectivity solutions. The entity is formally listed within this threat-intelligence index as a ransomware victim associated with threat actor interlock. The designation reflects the cybersecurity context in which the organization was identified, emphasizing its operational sector and the cyber threat profile linked to the interlock actor group. No specific incident details, such as data stolen, ransom demands, or breach confirmation metrics, are included to maintain factual neutrality and avoid speculation beyond the index classification. This entry serves catalog and intelligence purposes for monitoring ransomware exposure across critical logistics environments. |
||||||
| Ransomware | Cold Front Distribution id32730 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the Retail and E-commerce sector and serves customers in the United States. The entity is documented within this threat-intelligence index as a ransomware victim associated with the threat actor interlock. This listing reflects observed security events impacting the organization's digital infrastructure and operational continuity. The catalog entry provides neutral context for defenders assessing risks within retail and e-commerce environments targeted by coordinated cyber threats. No specific breach details, data loss metrics, or ransom terms are included in this description to maintain factual accuracy and neutrality. |
||||||
| Ransomware | Cold Front Distribution id32731 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with freight coordination, supply chain management, and passenger movement logistics. As a ransomware victim, the entity is cataloged in the threat-intelligence index under association with threat actor interlock, reflecting its exposure within this threat landscape. The listing type identifies Coldfrontdist.com specifically as a ransomware victim linked to interlock. This entry documents the entity’s sector profile, geographic context, and its relationship to the identified threat actor without asserting unverified incident details. The description remains neutral and factual, focused on the entity’s classification within the intelligence index. |
||||||
| Ransomware | Cold Front Distribution id32731 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com represents a US-based entity within the Retail and E-commerce sector. It is cataloged as a ransomware victim within the threat-intelligence index, with its associated threat actor and source identified as interlock. The entity reflects cybersecurity exposure within commercial digital operations, highlighting vulnerabilities relevant to retail infrastructure and online commerce environments. This listing provides neutral context for threat analysts tracking ransomware incidents across sectors and geographic regions. coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32731 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services relevant to online consumer markets. The entity is cataloged in this threat-intelligence index under the ransomware victim listing type, associated with the threat actor interlock. This designation reflects inclusion within an analytical framework tracking cybersecurity incidents and adversary activity across targeted sectors and geographies. No specific incident details, such as data stolen, records accessed, ransom demands, or confirmed breach evidence, are provided here to maintain factual neutrality and avoid speculation. Coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32731 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and freight management workflows. The domain is cataloged as a ransomware victim within a threat-intelligence index, with its associated threat actor and source identified as interlock. This listing reflects cybersecurity monitoring efforts documenting adversary activity and victim profiles across critical infrastructure sectors. No specific incident details, such as data stolen, ransom terms, or confirmed breach evidence, are included to maintain factual neutrality. The entry serves as a reference point for threat actors, defenders, and intelligence consumers analyzing ransomware exposure in transportation and logistics environments. |
||||||
| Ransomware | Cold Front Distribution id32732 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the US Retail and E-commerce sector, providing digital commerce services and infrastructure relevant to modern business operations. As cataloged in the threat-intelligence index, this entity is designated as a ransomware victim linked to the interlock threat actor group. The listing type identifies ColdFrontDist.com not as an attacker but as an organization affected by cyber incidents, underscoring the importance of tracking victim profiles for defensive intelligence and sector-specific threat analysis. This classification supports cybersecurity professionals in understanding attack patterns within retail and e-commerce environments and refining protective measures against evolving ransomware campaigns. Neutral documentation of this relationship aids in building comprehensive threat landscapes without speculative claims about specific attack details. |
||||||
| Ransomware | Cold Front Distribution id32732 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As cataloged in threat-intelligence indexes, this entity is classified as a ransomware victim associated with the threat actor Interlock. The listing reflects observed cybersecurity intelligence linking the organization to this adversary group without disclosing specific incident details. This designation contributes to broader awareness of ransomware targeting retail and e-commerce environments. The entry serves threat analysts and defenders seeking contextual understanding of affected entities within the sector and geographic region. |
||||||
| Ransomware | Cold Front Distribution id32737 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and infrastructure relevant to modern business operations. As cataloged in this threat-intelligence index, the entity is designated as a ransomware victim linked to the threat actor interlock. The listing type identifies ColdFrontDist.com within incident records where ransomware activity was observed or attributed to interlock, providing context for threat analysts tracking retail sector vulnerabilities. This description reflects the indexed classification without asserting unverified details regarding data exfiltration, operational impact, or specific breach mechanics. The entry serves as a neutral reference point for monitoring cyber threats affecting US-based e-commerce organizations. |
||||||
| Ransomware | Cold Front Distribution id32738 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution-related services. As cataloged in the threat-intelligence index, it is classified as a ransomware victim entity associated with the threat actor interlock. The entity reflects cybersecurity exposure within commerce infrastructure, where ransomware incidents can disrupt operations and customer trust. This listing serves as a reference point for monitoring threat patterns, actor activity, and sector-specific risk indicators in retail technology environments. No specific incident details, data scope, or confirmed breach assertions are included here. |
||||||
| Ransomware | Cold Front Distribution id32742 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sectors, providing digital commerce services under that domain. The entity is formally listed within this threat-intelligence index as a ransomware victim associated with the threat actor interlock. This designation reflects the cybersecurity context in which the organization appears, highlighting its exposure to ransomware-related activity without disclosing unverified incident details. The catalog entry emphasizes the entity's sector, geographic location, listing classification, and attributed threat actor for analytical and defensive reference. |
||||||
| Ransomware | Cold Front Distribution id32745 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing domain-related services aligned with supply chain and mobility workflows. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects its role within cybersecurity threat reporting and does not confirm specific incident details, data exfiltration, ransom activity, or operational impact. This designation supports monitoring of ransomware exposure across critical logistics infrastructure and related service providers. |
||||||
| Ransomware | Cold Front Distribution id32746 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the US Retail and E-commerce sector, providing digital commerce and retail-related services under its domain. It is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. The entry documents the entity's presence within cybersecurity intelligence records for monitoring retail and e-commerce infrastructure exposure. Specific technical incident details, such as data accessed or operational impact, are intentionally not asserted here to maintain factual neutrality and avoid unverified claims. This listing serves as a structured reference point for analysts tracking ransomware activity and associated threat actor activity across commercial sectors. |
||||||
| Ransomware | Cold Front Distribution id32748 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and associated infrastructure. The entity has been cataloged in the threat-intelligence index as a ransomware victim, with its association explicitly tied to the threat actor interlock. This listing reflects observed security event linkage rather than confirmed breach details, ensuring neutrality regarding operational impact or data exposure specifics. Understanding such victim profiles aids cybersecurity teams in identifying attack patterns relevant to retail and e-commerce environments. The designation underscores ongoing vigilance required for organizations in this sector against evolving cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32756 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with freight coordination, supply chain connectivity, and passenger or cargo movement support. The entity is cataloged as a ransomware victim associated with the threat actor interlock. This listing type indicates the entity was identified within threat-intelligence indexing as a target of ransomware activity connected to interlock. The description remains neutral and avoids inventing specific incident details such as stolen data, ransom terms, or confirmed breach metrics. It focuses on the entity's sector profile, geographic context, listing classification, and attributed threat actor. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector. The domain name and associated context indicate an organization serving critical supply chain and mobility services, where operational continuity and data integrity are essential. Within threat-intelligence indexing frameworks, Coldfrontdist.com is cataloged as a ransomware victim entity associated with the threat actor interlock. This classification reflects its inclusion in cybersecurity monitoring databases tracking adversary-targeted organizations across key infrastructure sectors. The description remains neutral regarding specific incident details, as verified facts are limited to the entity's sector, geographic presence, listing classification, and attribution to interlock. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the Retail and E-commerce sector, serving the United States market with digital commerce capabilities. The entity is documented in this threat-intelligence index under the classification of ransomware victim, linked to the threat actor interlock. This listing reflects verified intelligence correlating the domain or organization with malicious activity targeting retail and e-commerce environments. The entry provides neutral context for security professionals assessing ransomware exposure in relevant sectors and geographic regions. Coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sectors, providing digital commerce infrastructure and services. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The designation reflects observed malicious activity targeting commerce environments, without disclosing specific stolen data, operational impacts, or financial losses. This listing serves as a verified indicator for security teams monitoring retail and online business exposures. Understanding such victim profiles aids defenders in recognizing attack patterns and bolstering sector-specific resilience against evolving cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and infrastructure relevant to modern commercial operations. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor Interlock. This designation reflects observed security events tied to Interlock's activity within the affected sector and geographic context. The listing serves as a structured reference point for analysts tracking ransomware incidents, threat actor propagation, and sector-specific vulnerabilities in retail and e-commerce environments. Neutral documentation focuses on verified associations and sector context without extrapolating unconfirmed technical or operational details. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor Interlock. The listing reflects the entity's status within cybersecurity threat reporting frameworks, highlighting exposure to ransomware activity in its operational environment. This entry supports defenders and analysts monitoring retail and e-commerce infrastructure threats, contextualizing the impact of Interlock's campaigns across vulnerable commercial sectors. No specific incident details, such as data stolen or ransom demands, are included per strict factual reporting guidelines. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As documented in the threat-intelligence index, it is classified as a ransomware victim associated with the interlock threat actor. The entity's inclusion reflects observed cybersecurity activity targeting retail and e-commerce infrastructure. This listing serves as an authoritative reference point for analysts tracking adversary campaigns and victim profiles across commercial sectors. No specific incident details, such as data stolen or ransom demands, are included per strict factual boundaries. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with freight coordination, supply chain management, and passenger movement support. As a ransomware victim entity indexed in this threat-intelligence catalog, it is associated with the threat actor interlock, reflecting a documented cyber incident within its operational domain. The listing type identifies ColdFrontDist.com specifically as a ransomware victim linked to interlock, contributing contextual intelligence for security professionals monitoring sector-relevant threats. This entry serves as a factual reference point within the threat-intelligence index, emphasizing sector classification, geographic origin, and the verified association with the interlock actor without disclosing unconfirmed incident details. |
||||||
| Ransomware | Cold Front Distribution id32758 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com is a US-based entity operating within the Retail and E-commerce sectors, cataloged as a ransomware victim within the threat-intelligence index. Its inclusion reflects observed threat activity linked to the interlock threat actor group. The entity represents a target profile relevant to retail and online commerce infrastructure, where ransomware incidents can disrupt operations and customer trust. This listing serves as a structured reference point for analysts tracking cyber threats, victim profiles, and associated actors across commercial sectors. ColdFrontDist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32759 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and associated infrastructure. As cataloged in threat-intelligence indexes, this entity is identified as a ransomware victim connected to the threat actor Interlock. The listing type specifically denotes the compromised status of the organization's systems, reflecting the nature of the cyber incident attributed to Interlock's activity. This description adheres to neutral, encyclopedic standards for cataloging security events without disclosing unverified technical or operational details. The designation serves to inform defenders and analysts about associated risks within the retail and e-commerce domain. |
||||||
| Ransomware | Cold Front Distribution id32759 View details | United States | Retail / E-commerce | leaked | ||
|
ColdfrontDist.com operates within the United States in the Transportation, Travel, and Logistics sector, providing services aligned with supply chain and mobility operations. The domain is documented in this threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. This entry reflects cybersecurity intelligence compiled regarding network activity and potential compromise indicators tied to the entity and its operational context. The description remains factual and neutral, focusing on the entity's sector profile and its classification within the ransomware victim index linked to interlock. No specific incident details, such as data stolen or ransom demands, are included per strict factual constraints. |
||||||
| Ransomware | Cold Front Distribution id32759 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, functioning as a commercial entity targeted within threat intelligence indexing. The domain is cataloged specifically as a ransomware victim associated with the threat actor interlock. This listing type indicates documented exposure to ransomware activity tied to interlock's operational patterns, reflecting cybersecurity risk assessment for sector-relevant organizations. The description remains factual and neutral, focusing on the entity's classification, geographic context, industry focus, and verified threat linkage without extrapolating unconfirmed incident details. |
||||||
| Ransomware | Cold Front Distribution id32759 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and infrastructure. The entity is cataloged within this threat-intelligence index as a ransomware victim linked to the Interlock threat actor. This classification reflects observed security events impacting the organization's digital environment and operational continuity. The listing serves to document the association for cybersecurity professionals monitoring retail and e-commerce sector vulnerabilities. No specific incident details, data breach specifics, or confirmed loss metrics are included per strict factual constraints. |
||||||
| Ransomware | Cold Front Distribution id32759 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and related distribution services. The entity is cataloged in the threat-intelligence index under the listing type ransomware victim, associated with the threat actor interlock. This designation reflects its inclusion in intelligence records documenting cyber incidents affecting retail and e-commerce organizations. The description avoids speculative claims regarding data stolen, ransom demands, or breach confirmation, focusing solely on the verified listing context and sector profile. ColdFrontDist.com serves as a reference point for security teams monitoring ransomware activity across US retail and e-commerce environments. |
||||||
| Ransomware | Cold Front Distribution id32759 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility operations. The domain is cataloged as a ransomware victim within a threat-intelligence index, with the associated threat actor and source designated as interlock. This listing reflects cybersecurity monitoring activity concerning entities potentially impacted by ransomware campaigns targeting critical logistics infrastructure. The description remains neutral and avoids speculative details regarding data handling, breach scope, or recovery outcomes. coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32763 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with operational continuity and supply-chain connectivity. The domain is referenced in the threat-intelligence index under the classification ransomware victim, associated with the threat actor Interlock. This listing reflects observed threat-intelligence linkage rather than confirmed incident details, preserving neutrality regarding specific compromise evidence. The entity serves as a contextual marker within cybersecurity monitoring for organizations assessing ransomware exposure across critical logistics infrastructure. |
||||||
| Ransomware | Cold Front Distribution id32765 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and movement management workflows. The domain is referenced within a threat-intelligence index as a ransomware victim entity associated with the threat actor interlock. This listing type denotes a confirmed or assessed victim profile in cybersecurity threat databases, reflecting observed or reported malicious activity targeting this sector and entity. The description remains neutral, focusing solely on the entity's sector, geographic context, and its classification within the intelligence catalog without speculating on breach details, data loss, or recovery specifics. Such catalog entries support defenders in identifying patterns and contextualizing incidents across critical infrastructure domains. |
||||||
| Ransomware | Cold Front Distribution id32768 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution-related services. The entity is cataloged as a ransomware victim associated with the INTERLOCK threat actor. This listing reflects its inclusion in a threat-intelligence index documenting cybersecurity incidents and adversary relationships across commercial sectors. No specific breach details, data exfiltration scope, or ransom terms are asserted here, maintaining factual neutrality per catalog standards. The entry serves analysts tracking ransomware campaigns targeting retail and e-commerce environments. |
||||||
| Ransomware | Cold Front Distribution id32771 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. As cataloged in the threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor Interlock. This listing type identifies compromised infrastructure or organizations targeted by ransomware campaigns, contextualized by the entity's sector and geographic location. The entry serves threat analysts to track victim profiles, attacker affiliations, and sector-specific exposure patterns without disclosing unverified incident details. Neutral documentation ensures alignment with cybersecurity intelligence standards and avoids speculation regarding compromised assets or breach specifics. |
||||||
| Ransomware | Cold Front Distribution id32772 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce solutions and associated services to customers and partners. It is cataloged within this threat-intelligence index under the designation ransomware victim, with the associated threat actor identified as interlock. This listing reflects observed security-related activity and contextual intelligence surrounding the entity and its connection to the interlock threat actor group. The entry serves as a reference point for monitoring cyber threats affecting retail and e-commerce organizations in the US. |
||||||
| Ransomware | Cold Front Distribution id32772 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com is an entity operating within the United States transportation, travel, and logistics sector. Its domain and operational context align with services supporting freight movement, supply chain coordination, and passenger transit logistics. The entity is cataloged as a ransomware victim associated with the threat actor interlock. This listing type indicates a cybersecurity incident where the organization was targeted by interlock’s ransomware activity. The description avoids speculation regarding data stolen, ransom demands, or breach confirmation, focusing strictly on the verified threat-intelligence classification and sector context. |
||||||
| Ransomware | Cold Front Distribution id32775 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility infrastructure. The entity is formally listed within this threat-intelligence index as a ransomware victim associated with the interlock threat actor. This classification reflects its inclusion in intelligence records documenting cyber incidents affecting organizations in this operational domain. The designation underscores the sector-specific exposure faced by logistics-focused entities to ransomware campaigns. Coldfrontdist.com remains cataloged for analytical reference regarding threat actor activity and victim impact within transportation networks. |
||||||
| Ransomware | Cold Front Distribution id32775 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce and customer-facing services. The domain functions as an entity within a threat-intelligence catalog, specifically categorized as a ransomware victim linked to the threat actor interlock. This listing reflects cybersecurity intelligence compiled from verified sources regarding entity exposure and associated adversarial activity within the retail technology environment. The designation underscores ongoing vigilance required for sector-specific digital infrastructure resilience against ransomware campaigns. Coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32775 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfront Dist. operates within the United States transportation, travel, and logistics sector. The domain coldfrontdist.com represents an organization whose infrastructure was assessed within threat-intelligence indexing. This listing type identifies coldfrontdist.com as a ransomware victim associated with the threat actor interlock. The description reflects the entity's sector profile and its inclusion in the ransomware victim index tied to interlock, without asserting unverified incident details. This catalog entry supports security teams monitoring cyber threats across critical logistics supply chains. |
||||||
| Ransomware | Cold Front Distribution id32776 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the Retail and E-commerce sector, based in the United States, and functions as a commercial entity within this industry vertical. It has been cataloged in the threat-intelligence index under the listing type ransomware victim, specifically linked to the threat actor interlock. This designation reflects its documented association within cybersecurity intelligence records concerning ransomware-related activity in the retail and e-commerce context. The entry provides neutral, factual context for researchers and defenders monitoring threat actor campaigns across retail and e-commerce sectors in the US. |
||||||
| Ransomware | Cold Front Distribution id32779 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce services to customers and partners. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects the cybersecurity context surrounding the organization's exposure to this specific threat actor's activity within its industry. This record serves to inform stakeholders about the entity's status and the correlated threat landscape affecting retail and e-commerce environments in the US. |
||||||
| Ransomware | Cold Front Distribution id32781 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com is a domain associated with the US Transportation, Travel, and Logistics sector, operating within digital services relevant to freight movement, passenger connectivity, and supply-chain coordination. As cataloged in the threat-intelligence index, it is listed as a ransomware victim linked to the interlock threat actor group. The entity reflects a cybersecurity context where operational continuity, data integrity, and service availability are critical across transportation networks. This listing serves as an indexed reference point for security teams assessing ransomware exposure within logistics-focused organizations. No specific breach details, stolen data categories, record counts, ransom terms, or confirmed incident specifics are included here, preserving factual neutrality. |
||||||
| Ransomware | Cold Front Distribution id32783 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com is identified within the threat-intelligence index as a ransomware victim entity operating in the Retail and E-commerce sector, with operational context tied to the United States. The domain and associated listing represent cybersecurity intelligence concerning compromised systems or organizational exposure within this specific industry vertical. This entry documents the relationship between the entity and threat actor interlock, providing catalog context for defenders, analysts, and security teams monitoring retail and e-commerce threat landscapes. The description remains factual and neutral, focusing solely on the indexed classification without elaborating on unverified incident details such as data accessed, ransom demands, or confirmed breach scope. ColdFrontDist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32784 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce services to customers and partners. The entity is cataloged in this threat-intelligence index under the designation of ransomware victim, with its associated threat actor identified as interlock. This listing reflects the cybersecurity community's documentation of the entity's involvement within a threat actor campaign targeting retail and e-commerce infrastructure. The entry serves to inform defenders and analysts about potential exposure vectors and contextual risk factors associated with this organization. It neutrally states that coldfrontdist.com was listed as a ransomware victim associated with interlock. |
||||||
| Ransomware | Cold Front Distribution id32784 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce services and infrastructure. As cataloged in threat-intelligence indexes, this entity is formally listed as a ransomware victim associated with the threat actor interlock. The designation reflects its role within the incident landscape concerning cyber threats targeting commercial online operations. This entry serves to inform security professionals and stakeholders about compromised entities linked to specific adversarial activity in critical business sectors. |
||||||
| Ransomware | Cold Front Distribution id32784 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the US Retail and E-commerce sector, providing digital commerce services and infrastructure relevant to modern retail operations. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim linked to the threat actor interlock. The listing type identifies the relationship between the entity and the associated malicious actor without disclosing confirmed breach specifics, operational impacts, or unverified incident details. This entry serves threat analysts and security professionals seeking structured context on ransomware-related victim profiles within specific sectors and geographic regions. The description adheres to neutral, encyclopedic standards for catalog documentation. |
||||||
| Ransomware | Cold Front Distribution id32784 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfront Dist. operates within the United States transportation, travel, and logistics sector, providing services aligned with freight movement, supply chain coordination, and passenger or cargo logistics management. The domain https:coldfrontdist.com is cataloged as a ransomware victim within the threat-intelligence index, with its association to threat actor interlock documented for analytical context. This listing reflects the entity's classification based on verified intelligence sources and its operational sector, without disclosing unconfirmed breach details, data loss specifics, or financial impact. The record serves to inform stakeholders of cybersecurity exposure patterns relevant to logistics and travel infrastructure. |
||||||
| Ransomware | Cold Front Distribution id32784 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States transportation, travel, and logistics sector, presenting as a ransomware victim within the threat-intelligence index. The entity name and sector context indicate exposure relevant to operational continuity and supply chain resilience concerns across connected logistics networks. As cataloged, Coldfrontdist.com is associated with the threat actor interlock, reflecting the intelligence linkage between the entity and this identified adversary group. This listing type documents the ransomware victim classification without disclosing confirmed breach details, data scope, or operational impact specifics. The entry serves threat-intelligence purposes by anchoring sector context, geographic location, and actor association for analytical review. |
||||||
| Ransomware | Cold Front Distribution id32784 View details | United States | Retail / E-commerce | leaked | ||
|
https://coldfrontdist.com represents an organization operating within the United States transportation, travel, and logistics sector. Its domain and operational profile align with entities serving critical supply chain and mobility functions, making it relevant within threat-intelligence catalogs focused on cyber incidents affecting industrial and service-oriented industries. The entity is cataloged specifically as a ransomware victim associated with the threat actor interlock. This listing type indicates inclusion in a ransomware-victim index tied to interlock's activity, supporting analysts tracking adversary-targeted organizations across key sectors without disclosing unverified incident details. The description remains neutral and factual, reflecting the entity's sector, geographic context, listing classification, and associated threat actor. |
||||||
| Ransomware | Cold Front Distribution id32785 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sectors, serving as a business entity referenced within a threat-intelligence index. The domain name suggests distribution or commerce functions aligned with its identified sector, though specific operational details are limited in public threat records. As cataloged, ColdFrontDist.com is formally listed as a ransomware victim associated with the threat actor interlock. This designation reflects its inclusion in intelligence datasets tracking cyber incidents, attacker attribution, and affected organizations across critical digital commerce environments. The entry provides neutral context for analysts monitoring retail and e-commerce cybersecurity risks linked to interlock-affiliated activity. |
||||||
| Ransomware | Cold Front Distribution id32785 View details | United States | Retail / E-commerce | leaked | ||
|
Coldfrontdist.com operates within the United States manufacturing and engineering sectors, providing domain-related services relevant to industrial operations and technical workflows. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim linked to the interlock threat actor. The listing type indicates observed or attributed ransomware activity involving this organization, contextualized by its sector and geographic location. No specific incident details such as stolen data categories, record counts, ransom amounts, or confirmed breach specifics are provided, maintaining factual neutrality. This entry supports cyber-threat-intelligence analysis for manufacturers and engineering firms targeting threat actor interlock activity. |
||||||
| Ransomware | Cold Front Distribution id32785 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the Retail and E-commerce sector and is situated in the United States. The domain functions as an entity within this threat-intelligence index, reflecting cybersecurity exposure patterns relevant to digital commerce environments. It has been formally cataloged as a ransomware victim linked to the interlock threat actor group. This listing contributes contextual intelligence for monitoring retail infrastructure threats and associated cybercrime activity. The description remains neutral, focusing solely on the verified classification without extrapolating beyond confirmed index data. |
||||||
| Ransomware | Cold Front Distribution id32785 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and freight management needs. The domain functions as a business identifier within this operational context, reflecting activities relevant to moving goods and managing transit-related workflows. Within the threat-intelligence index, ColdFrontDist.com is cataloged as a ransomware victim associated with the threat actor interlock. This listing reflects the entity's inclusion in cybersecurity monitoring frameworks focused on identifying compromised organizations and their attacker connections. No specific incident details, such as data exfiltration scope or ransom demands, are provided here, maintaining factual neutrality regarding the threat context. |
||||||
| Ransomware | Cold Front Distribution id32785 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and freight management workflows. The domain functions as an online presence for an organization serving this operational area, where cybersecurity resilience is critical for maintaining service continuity and data integrity. Within threat-intelligence indexing frameworks, coldfrontdist.com is cataloged as a ransomware victim entity associated with the threat actor interlock. This classification reflects its inclusion in intelligence records documenting adversary activity targeting sector-specific organizations. The listing type underscores the incident context without disclosing unverified technical or operational details. |
||||||
| Ransomware | Cold Front Distribution id32785 View details | United States | Retail / E-commerce | leaked | ||
|
coldfrontdist.com operates within the United States retail and e-commerce sector, providing digital commerce solutions and associated services tailored to online business operations. It has been formally cataloged within this threat-intelligence index under the classification ransomware victim, associated with the threat actor interlock. This designation reflects its inclusion in intelligence records documenting cyber incidents affecting retail and e-commerce environments. The entity serves as a reference point for analyzing threat patterns, defensive strategies, and sector-specific vulnerability landscapes in modern commerce infrastructure. |
||||||
| Ransomware | Cold Front Distribution id32788 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility operations. The entity is cataloged within the threat-intelligence index under the designation ransomware victim, associated with the threat actor interlock. This listing reflects observed threat activity context for organizations operating in critical infrastructure-adjacent sectors. No specific incident details, data breach confirmations, or operational impacts are asserted here, maintaining a neutral and factual perspective consistent with threat-intelligence documentation standards. The entry serves to document the entity's classification and its relationship to the identified threat actor within the index. |
||||||
| Ransomware | Cold Front Distribution id32795 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sectors, providing digital commerce and distribution services. As a ransomware victim indexed alongside threat actor interlock, this entity is cataloged within the threat-intelligence framework to document attack exposure and contextualize cybersecurity incidents within specific industry boundaries. The listing type identifies ColdFrontDist.com as a ransomware victim linked to interlock, contributing structured intelligence for defenders analyzing actor campaigns and sector-specific vulnerabilities. This description adheres strictly to verified indexing attributes without extrapolating unconfirmed breach details, ensuring factual neutrality for catalog consumption and analytical reference. |
||||||
| Ransomware | Cold Front Distribution id32795 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility operations. As cataloged in the threat-intelligence index, the entity is classified as a ransomware victim associated with threat actor interlock. The listing reflects the entity's role within the incident context without disclosing confirmed breach specifics, data exfiltration details, or operational impact. This entry serves as a neutral reference point for cybersecurity professionals monitoring ransomware activity across critical logistics infrastructure. Further validation of incident details should be drawn from official disclosures where available. |
||||||
| Ransomware | Cold Front Distribution id32798 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States retail and e-commerce sector, providing digital commerce and distribution services. Within the threat-intelligence index, this entity is formally listed as a ransomware victim associated with the interlock threat actor group. The designation reflects observed or attributed cyber activity linking interlock to this sector and geographic context, without confirming specific breach details. Catalog records for such entities support security teams in tracking victimization patterns across retail and e-commerce environments. This entry remains neutral, relying on verified index classification rather than speculative claims about compromised data or operational impact. |
||||||
| Ransomware | Cold Front Distribution id32800 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States transportation, travel, and logistics sector, providing services aligned with supply chain and mobility operations. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim associated with the threat actor interlock. The listing reflects observed cybersecurity intelligence linking the organization to this adversary group without disclosing specific technical details, data scope, or confirmed breach elements. This entry supports threat-aware monitoring for sector-relevant entities facing ransomware risks. The designation underscores the vulnerability of logistics infrastructure to coordinated cyber threats. |
||||||
| Ransomware | Cold Front Distribution id32805 View details | United States | Retail / E-commerce | leaked | ||
|
ColdFrontDist.com operates within the United States manufacturing and engineering sector, providing specialized technical and operational services relevant to industrial workflows. As cataloged in the threat-intelligence index, this entity is formally listed as a ransomware victim linked to the interlock threat actor group. The designation reflects observed security events within its operational environment, contributing contextual data for cybersecurity professionals monitoring industrial sectors. This entry supports comprehensive threat-intelligence analysis by documenting victim profiles, associated actors, and sector vulnerabilities without disclosing unverified incident details or speculative claims about compromised assets or data. |
||||||