Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-02 10:39:06 UTC
Home > List all groups > List all tools > List all groups using tool ProLock
 Tool: ProLock
Names
ProLock
PwndLocker
Category Malware
Type Ransomware, Big Game Hunting
Description
(ZDNet) In most of the incidents analyzed by security researchers, the ProLock
ransomware was deployed on networks that have been previously infected with the
QakBot trojan.
The Qakbot trojan is distributed via email spam campaigns or is dropped as a second-stage payload on computers previously infected with the Emotet trojan. System
administrators who find computers infected with either of these two malware strains
should isolate systems and audit their networks, as the ProLock gang could be already
wandering around their systems.
Information
MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool ProLock
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2f0e2d3f-e9a2-40a1-8708-3a0dc89af7fb
Page 1 of 2

Changed Name Country Observed
APT groups
  Mallard Spider [Unknown] 2008-Dec 2020  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2f0e2d3f-e9a2-40a1-8708-3a0dc89af7fb
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2f0e2d3f-e9a2-40a1-8708-3a0dc89af7fb
Page 2 of 2