LunaLock is a ransomware group that first emerged in early September 2025, distinguishing itself with a novel "AI Extortion" tactic. Their primary motivation is financial gain, achieved through encrypting victim data and exfiltrating sensitive information. What uniquely sets this group apart is its explicit threat to submit stolen artwork and other intellectual property to artificial intelligence companies for training large language models if ransom demands are not met, thereby making the data irreversibly part of AI commons. While no specific country of origin is confirmed, operators appear to be native English speakers. The group is also known by the aliases LunaLock APT and LunaLock alpha.

Aliases del actor

lunalock alpha

Actores similares

alphalockeractor · 3apt-oilalphaactor · 1alphaactor · 1redalphaactor · 1RedAlphaapt · 0OilAlphaapt · 0Alpha Ransomwareransomware · 0

Paises afectados

URLs nuevas detectadas en IntelTracker