interlock
Known ransomware group ACTIVE Currently active
Interlock is a ransomware operation active since 2024 that targets both Windows and FreeBSD/Linux systems, notable for using fake browser-update lures and "ClickFix" social engineering for initial access. It has struck healthcare and critical-infrastructure organizations.
9
Total Claims
4
Critical
—
Records Claimed
5
Industries Hit
Active span: May 11, 2026 – Nov 10, 2026 · 9 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Oct 2026 (4)May 2026
LessMore
Nov 2026Share this profile
Top Targeted Industries
Healthcare 4
Education 2
Retail & E-Commerce 1
Energy & Utilities 1
Government & Defense 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
2
Known leak sites
Targeted Organizations
Claims by interlock
Critical
Ransomware Claim: Southwest Orthopedic & Reconstructive Specialists
Southwest Orthopedic & Reconstructive Specialists
interlock
Ransomware Healthcare
Nov 10, 2026 Low
Ransomware Claim: Madison Honda
Madison Honda
interlock
Ransomware Retail & E-Commerce
Nov 10, 2026 Low
Ransomware Claim: Coastal Alabama Community College
Coastal Alabama Community College
interlock
Ransomware Education
Oct 22, 2026 Critical
Ransomware Claim: Concord Eye Center
Concord Eye Center
interlock
Ransomware Healthcare
Oct 12, 2026 Low
Ransomware Claim: Greentech Environmental
Greentech Environmental
interlock
Ransomware Energy & Utilities
Oct 12, 2026 Critical
Ransomware Claim: O2 Dental Group
O2 Dental Group
interlock
Ransomware Healthcare
Oct 5, 2026 High
5.6 TB leaked Ransomware Claim: City of Fort Smith Arkansas
City of Fort Smith Arkansas
interlock
Ransomware Government & Defense
Sep 16, 2026 Low
Ransomware Claim: Springfield Public Schools
Springfield Public Schools
interlock
Ransomware Education
Sep 16, 2026 Critical
Ransomware Claim: Park Dental Research
Park Dental Research
interlock
Ransomware Healthcare
May 12, 2026