DeadLock ransomware leverages Polygon contracts and Session chat to thwart takedowns
Microsoft's latest analysis shows DeadLock ransomware now runs its extortion workflow on Polygon smart contracts and the Session messaging network, moving ransom negotiations and leak hosting off‑premise. This decentralized architecture, coupled with geofencing and throttling tricks, has let the group hit over 80 organizations worldwide while evading traditional disruption efforts.