Interlock and Rhysida within the ransomware ecosystem

IBM X-Force’s research reveals strong technical and operational overlaps between Interlock and Rhysida ransomware groups—especially in their use of custom malware, crypters, and infection chains—highlighting a dynamic, interconnected ransomware ecosystem with blurred lines between developers, affiliates, and enablers.