The ransomware DeadLock is using Polygon smart contracts to rotate proxy addresses in order to conceal its activities.

Researchers at cybersecurity firm Group-IB have discovered a ransomware program called "DeadLock" that is using the Polygon smart contract to hide itself and rotate proxy addresses. First discovered last July, the ransomware dynamically updates the command and control infrastructure addresses used to communicate with victims by calling specific smart contracts.