xinglocker
Activity analysis
HackerFeeds has tracked 21 victims claimed by xinglocker since April 2021, most recently in October 2021 — ranking #167 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in October 2021. Its most-targeted sector is Manufacturing (4 victims), followed by Healthcare (3). The United States accounts for 2 victims (100% of those with a known location); 19 victims did not disclose a location.
Victims per year
- 202121
Top sectors
- Manufacturing4
- Healthcare3
- Financial Services2
- Business Services2
- Transportation/Logistics1
- Technology1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
XingLocker is a ransomware group that emerged in May 2021 as part of a franchise-style RaaS model built on a customized MountLocker payload, using IcedID for initial access and Windows Active Directory APIs for worm-style lateral movement across networks.
Recent victims
No victims tracked yet.

