SatanLock Ransomware Ends Operations, Says Stolen Data Will Be Leaked

SatanLock Ransomware Ends Operations, Says Stolen Data Will Be Leaked

The newly formed SatanLock ransomware group has announced it is shutting down. Before disappearing, however, the group says it will leak all the data stolen from its victims later today. The announcement was made on the gang’s official Telegram channel and dark web leak site.

It’s also worth noting that the group has deleted all victim listings that were visible just hours ago. Now, anyone visiting their .onion site sees a message reading, “SatanLock project will be shut down – The files will all be leaked today.”

SatanLock Ransomware’s announcement (Image credit: Hackread.com)

SatanLock has been active since early April 2025 and is known for its aggressive tactics. The group quickly gained attention, posting details of 67 victims on its dark web leak site within just a few weeks.

Interestingly, as highlighted in a May 2025 report, by Check Point, more than 65% of these victims had already appeared on leak sites run by other ransomware gangs. This suggests the group may have used shared infrastructure or deliberately tried to “re-claim” already compromised networks.

According to an analysis by Lockbit Decryptor, a cybersecurity firm that helps victims remove Lockbit ransomware, SatanLock is linked to several other notorious ransomware families, including Babuk-Bjorka and GD Lockersec. These connections suggest the group is part of a much larger cybercriminal network.

SatanLock Ransomware Ends Operations, Says Stolen Data Will Be Leaked
SatanLock Ransomware’s victims by countries and industries (Image via Lockbit Decryptor)

The exact reason for SatanLock’s shutdown remains unclear. Just last week, news broke that Hunters International, another ransomware group, was shutting down too. However, it was later clarified that the group is only rebranding, moving its focus to data breaches and leaks instead of ransom demands.

Hunters International now operates under the name WORLD LEAKS. Is the SatanLock ransomware gang following the same modus operandi? Maybe we’ll never know, or maybe we will.

Even so, the shutdown of the SatanLock group is good news for victims. It’s one less cybercriminal gang out there extorting unsuspecting individuals and businesses with ransom demands.




Source link