Back to Threat Groups

satanlock

INACTIVE

ransomware group

Connected to GD Lockersec and Babuk-Bjorka. <br/> <br/>Group is aka SalanLock (from typo on victim pages).

Victims
1
records
First Discovered
May 8, 2026
victim
Last Discovered
May 8, 2026
victim
Inactive Since
158
days
Countries
0
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
1
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026

Infrastructure

leak site
OFFLINE

unreachable

http://2hxbnjzuymvdca4buxlyu4eolz4mbbxw2cnpibbb2od7z77y76di7cad.onion/

8960ms

2d ago

leak site
OFFLINE

unreachable

http://42fybwnnv2t6fykirmgxpwvvfidgnfmegrz4lpi3vskivfid7z7kqyqd.onion/

3926ms

1d ago

leak site
OFFLINE

unreachable

http://5g2e.l.time4vps.cloud/

437ms

3d ago

leak site
OFFLINE

unreachable

http://mgeegnexyhhn5dpqewihjy33qyhng3gy66h3fogiwefl5hljhtmfznad.onion/

8241ms

1d ago

leak site
OFFLINE

unreachable

http://satanlock2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onion

1ms

7d ago

leak site
OFFLINE

unreachable

http://tzhwmgguyxrg6q3tu4q3gvopcjynrhw6ryx2bdl5ghisdkyunfua5xyd.onion/

8943ms

6d ago