Technical Analysis of NailaoLocker Ransomware
This is the English version of the Japanese article “ランサムウェアNailaoLockerの調査“. In February 2025, several cybersecurity vendors published a report about a ransomware named NailaoLocker.Compared to other ransomware attacks, NailaoLocker was special because it was deployed along with malware (RAT) such as PlugX and ShadowPad. PlugX and ShadowPad is mainly used for cyber espionage purposes, by threat actors with nation-state background....