AdminLocker is a ransomware group that first emerged around December 2021, operating as a small, seemingly independent group rather than a Ransomware-as-a-Service model. Its primary motivation is financial gain through encrypting victim data. A distinguishing characteristic is its use of single-extortion tactics, encrypting files without publicly documented data exfiltration, a practice that contrasts with many modern ransomware operations. The group appends unique extensions such as .admin1, .admin2, .admin3, .1admin, .2admin, or .3admin to encrypted files.

Paises afectados