Group-IB researchers report that the newly discovered ransomware DeadLock (first appeared in July) uses Polygon smart contracts to store and rotate proxy server addresses, dynamically updating command and control infrastructure to evade shutdown; after infection, victims' data is encrypted, and they are threatened to pay a ransom or face data sale; by storing proxy addresses on-chain, the infrastructure is difficult to disrupt, with no central server; exposure is low, with no known data leak websites or associated programs, and a limited number of victim reports. (Cointelegraph)