DeadLock is a ransomware group first detected in July 2025, known for double extortion tactics and using decentralized infrastructure to enhance operational resilience. It has claimed 96 victims, primarily in Italy, Spain, Poland, Türkiye, and the U.S. The group uses selective encryption, geofencing, and blockchain-based communication to avoid disruption.