#GhostLocker
New GhostLocker Tool that uses Windows AppLocker to Neutralize and Control EDR:

potatosecuritynews.com/ghostlocker-...
December 23, 2025 at 10:35 AM
GhostLocker – A New Generation of Raas from Hacktivist Groups
GhostLocker - A New Generation of Raas from Hacktivist Groups
GhostLocker RaaS is run by the hacktivist groups GhostSec and SiegedSec, formed in early 2022. While besides this, like Stormous, have also joined GhostLocker.
cybersecuritynews.com
October 20, 2023 at 6:38 AM
Feed: "Cyber Security News"
By: Guru Baran on Tuesday, December 23, 2025
New GhostLocker Tool that Uses Windows AppLocker to Neutralize and Control EDR
A new tool named GhostLocker has been released, demonstrating a novel technique to neutralize Endpoint Detection and Response (EDR) systems by weaponizing the native Windows AppLocker feature.
cybersecuritynews.com
December 23, 2025 at 5:01 PM

Cisco Talos reveals that #GhostSec & Stormous ransomware groups are now offering #GhostLocker through a new RaaS program, STMX_GhostLocker, targeting over 15 countries across tech, gov, education & more.
thehackernews.com/2024/03/aler...
#ransomware #hacking
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
Cisco Talos reveals that GhostSec & Stormous ransomware groups are now offering GhostLocker through a new RaaS program, STMX_GhostLocker.
thehackernews.com
March 6, 2024 at 8:32 PM
"TheGhostSec and Stormous ransomware groups are jointly conducting double extortion ransomware attacks on various business verticals in multiple countries," Cisco Talos researcher Chetan Raghuprasad said in a report shared with The Hacker News. thehackernews.com/2024/03/aler...
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
Cisco Talos reveals that GhostSec & Stormous ransomware groups are now offering GhostLocker through a new RaaS program, STMX_GhostLocker.
thehackernews.com
March 6, 2024 at 1:21 PM
New GhostLocker Tool that Uses Windows AppLocker to Neutralize and Control EDR
New GhostLocker Tool that Uses Windows AppLocker to Neutralize and Control EDR
cybersecuritynews.com
December 23, 2025 at 10:22 AM
GhostSec & Stormous Operators Launched Twin Ransomware Attacks
GhostSec & Stormous Operators Launched Twin Ransomware Attacks
A hacking group has evolved with a new ransomware variant known as GhostLocker 2.0. ransomware attacks targeting various businesses globally.
cybersecuritynews.com
March 6, 2024 at 9:18 AM
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
Cisco Talos reveals that GhostSec & Stormous ransomware groups are now offering GhostLocker through a new RaaS program, STMX_GhostLocker.
thehackernews.com
March 6, 2024 at 7:13 AM
GhostLocker 2.0 Haunts Businesses Across Middle East, Africa & Asia
GhostLocker 2.0 Haunts Businesses Across Middle East, Africa & Asia
Ransomware cybercrime gangs GhostSec and Stormous have teamed up in widespread double-extortion attacks.
www.darkreading.com
March 5, 2024 at 1:23 PM
"GhostLocker and Stormous ransomware have started a new ransomware-as-a-service (RaaS) program STMX_GhostLocker, providing various options for their affiliates."
March 6, 2024 at 5:06 PM
EDR-GhostLocker: AppLocker-Based EDR Neutralization
EDR-GhostLocker: AppLocker-Based EDR Neutralization
github.com
December 21, 2025 at 8:54 AM
New GhostLocker Tool that uses Windows AppLocker to Neutralize and Control EDR:

cybersecuritynews.com/ghostlocker-...
December 23, 2025 at 10:35 AM
Introducing GhostLocker: A tool that exploits Windows AppLocker to disable EDR systems. Learn how it works and how to defend against it. #CyberSecurity #EDR #AppLocker #GhostLocker Link: thedailytechfeed.com/ghostlocker-...
December 24, 2025 at 3:08 PM
EDR-GhostLocker: AppLocker-Based EDR Neutralization
EDR-GhostLocker: AppLocker-Based EDR Neutralization
github.com
December 20, 2025 at 10:24 PM
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries #cybersecurity #infosec #privacy #news thehackernews.com/20...
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
Cisco Talos reveals that GhostSec & Stormous ransomware groups are now offering GhostLocker through a new RaaS program, STMX_GhostLocker.
thehackernews.com
March 6, 2024 at 7:18 AM
GhostSec: From Fighting ISIS to Possibly Targeting Israel with RaaS www.uptycs.com/blog/ghostlo...
GhostSec offers Ransomware-as-a-Service Possibly Used to Target Israel
Explore GhostSec's GhostLocker Ransomware-as-a-Service (RaaS): from hacktivist roots to Israel cyberattacks; featuring Uptycs' technical insights.
www.uptycs.com
November 6, 2023 at 6:06 AM
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

#thehackersnews
Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries
Cisco Talos reveals that GhostSec & Stormous ransomware groups are now offering GhostLocker through a new RaaS program, STMX_GhostLocker.
thehackernews.com
March 6, 2024 at 7:20 AM
🚨New ransom group blog post!🚨

Group name: stormous
Post title: GhostLocker/Stm

#ransomware #cti #threatintelligence #cybersecurity #infosec
April 16, 2026 at 3:25 AM