RedLocker ransomware walks through your open Redis port — 3,200 Linux servers encrypted in ten days with zero authentication

An automated ransomware campaign dubbed RedLocker exploits passwordless Redis instances exposed to the internet. By August 4, 2026, 3,200 servers had already been compromised. Close port 6379 or enable Redis authentication now.