AiLock

AiLock is a ransomware-as-a-service (RaaS) operation that encrypts victim files using ChaCha20 and NTRUEncrypt algorithms, appending the .AiLock extension. The malware creates a mutex named 'FAUST' to prevent duplicate execution and ensure only one instance runs on the infected system.