TI Mindmap HUB
Threat Intelligence Report

Ransomware Over WebChat: How Deadlock Used Polygon Blockchain and Session-Style Crypto for Negotiations

📅 June 28, 2026 📰 threatscene.com 🔍 0 CVE(s) referenced

Deadlock ransomware operators have embedded a covert, Session-style encrypted chat client into HTML ransom notes, using Polygon blockchain smart contracts as decentralized, censorship-resistant C2 beacons to dynamically route negotiations through privacy-focused service nodes—signaling a new era of ransomware leveraging smart contracts and decentralized networks for resilient, anonymous victim communications.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle