Back to Threat Groups
promptlock
INACTIVEransomware group
First known AI-powered ransomware. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly
Victims
0
records
First Discovered
—
victim
Last Discovered
Jun 21, 2026
victim
Inactive Since
—
—
Countries
0
hit
Avg Discount
—
no settlements
Group Activity
Last 12 monthsJul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Victims (0)
No victims recorded
Infrastructure
No sites tracked