Claim

ThreatLocker manufacturing ransomware incident INVOLVES Kanti

The manufacturing-company incident involved Kanti ransomware, which renamed files with the .kanti extension and encrypted systems.

Episode
EP 167 — Threatlocker
Origin
Explicit
Confidence
99% (extractor score, not a fact score)
Speaker
Guest
Attributed source
—

Transcript evidence

“they all end in the word .kanti”

Guest · offsets 2618–2649

“in the space of fifteen minutes it encrypted all 250 servers”

Guest · offsets 4678–4738

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:49:49.172886+00:00

claim:ep167:f4c35985454a