Threat intelligence / Malware

WastedLocker

[WastedLocker](https://attack.mitre.org/software/S0612) is a ransomware family attributed to [Indrik Spider](https://attack.mitre.org/groups/G0119) that has been used since at least May 2020. [WastedLocker](https://attack.mitre.org/software/S0612) has been used against a broad variety of sectors, including manufacturing, information technology, and media.(Citation: Symantec WastedLocker June 2020)(Citation: NCC Group WastedLocker June 2020)(Citation: Sentinel Labs WastedLocker July 2020)

Malware

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[WastedLocker](https://attack.mitre.org/software/S0612) is a ransomware family attributed to [Indrik Spider](https://attack.mitre.org/groups/G0119) that has been used since at least May 2020. [WastedLocker](https://attack.mitre.org/software/S0612) has been used against a broad variety of sectors, including manufacturing, information technology, and media.(Citation: Symantec WastedLocker June 2020)(Citation: NCC Group WastedLocker June 2020)(Citation: Sentinel Labs WastedLocker July 2020)

Labels

malware

21 recorded

Relationships

uses

from Indrik Spider

Group

uses

to Bypass User Account Control

Technique

uses

to Data Encrypted for Impact

Technique

uses

to Deobfuscate/Decode Files or Information

Technique

uses

to DLL

Technique

uses

to Encrypted/Encoded File

Technique

uses

to File and Directory Discovery

Technique

uses

to Hidden Files and Directories

Technique

uses

to Inhibit System Recovery

Technique

uses

to Junk Code Insertion

Technique

uses

to Modify Registry

Technique

uses

Technique

uses

to Network Share Discovery

Technique

uses

to NTFS File Attributes

Technique

uses

to Peripheral Device Discovery

Technique

uses

to Query Registry

Technique

uses

to Service Execution

Technique

uses

to System Checks

Technique

uses

to Windows Command Shell

Technique

uses

to Windows Permissions

Technique

uses

to Windows Service

Technique

5 external

References

mitre-attack

S0612

WastedLocker

—

NCC Group WastedLocker June 2020

https://research.nccgroup.com/2020/06/23/wastedlocker-a-new-ransomware-variant-developed-by-the-evil-corp-group/

Symantec WastedLocker June 2020

https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/wastedlocker-ransomware-us

Sentinel Labs WastedLocker July 2020

https://www.sentinelone.com/labs/wastedlocker-ransomware-abusing-ads-and-ntfs-file-attributes/