AiLock — Ransomware Profile

AiLock is a ransomware operation that emerged in early 2025, marketing itself as AI-assisted ransomware using a hybrid ChaCha20/NTRUEncrypt encryption scheme and double-extortion tactics, actively recruiting affiliates and threatening regulatory reporting if ransoms are unpaid.

Tools & malware

Recent claimed victims

Vendor research

Read the full analysis on IntelFusions