Interlock Ransomware

Interlock Ransomware

June 6, 2025

Discovered in mid-2019, InterLock Ransomware has emerged as a sinister cyber threat. The risk factor surrounding this ransomware variant remains high, especially for Windows users. In March 2020, it struck more than 50 school districts in the US causing long-term damage. Another high-profile incident took place in the same month when it breached the network of Human Rights Watch disrupting their work. Given these incidents, it is clear that any entity is a potential target of this ransomware.

Information on InterLock Ransomware

Category Details
Ransomware Name(s) InterLock Ransomware
First Detected/Reported Mid-2019
Targeted Operating Systems Windows
File Extensions Added .interlocked
Ransom Note Name(s) RansomNote.txt
Known Communication Channels Via provided email
Distribution Methods Phishing emails, exploits
Detection Names by Antivirus Solutions Ransom.InterLock

Example Ransom Note

YOU HAVE BEEN INFECTED BY InterLock RANSOMWARE
All your files are encrypted!
Do not try to recover them yourself. You could lose them forever.
Send one encrypted file for free decryption.
You can send us up to 3 files for free decryption
To get your decryption software contact us at:
[email protected]

Additional Information

  • No known decryption tool is currently available for the Interlock Ransomware.
  • The InterLock Ransomware is known to target particularly the public sector and non-governmental organizations.
  • It primarily spreads through phishing emails and exploits vulnerable software.
  • InterLock is not operated as a Ransomware-as-a-Service (RaaS) model.
  • Encrypted files typically receive the .interlocked ransomware file extension after infection.

Conclusion

InterLock Ransomware has proven to be a persistent and damaging threat, especially for public sector organizations and NGOs. With no known decryption tools currently available and distribution methods that exploit common vulnerabilities, proactive defense and expert intervention are essential.

As experts in ransomware recovery and cybersecurity, we offer specialized services such as Ransomware Recovery Services and Ransomware Negotiation Services. Organizations can also strengthen their defenses with our Cyber Defense AcademyCybersecurity Risk Assessment, and Incident Response Retainer.

Need help dealing with ransomware or preparing your systems against future attacks? Reach out to our team today.