GhostLocker 2.0 Ransomware Campaign Targets Organizations Across the Middle East, Africa, and Asia

GhostLocker is a ransomware operation that has targeted organizations across the Middle East, Africa, and Asia, impacting sectors including government, healthcare, education, technology, manufacturing, and critical infrastructure. The group conducts double-extortion attacks by stealing sensitive data before encrypting victim systems and subsequently threatening to publish the stolen information if ransom demands are not met. Researchers observed that GhostLocker 2.0 expanded its victim base and operational capabilities, leveraging ransomware-as-a-service (RaaS) techniques and modern extortion methods to increase the impact of its attacks against organizations in the affected regions.