ResideLocker

ResideLocker is publicly identified as an operator or administrator of CLOBELSECTEAM alongside ClayOxtymus1337. The same label is also used for a purported malware or extortion project and as a sign-off on CLOBELSECTEAM publications. In November 2025, actor-controlled posts announced ‘RESIDELOCKER 1.1’, a 168-hour cryptocurrency payment deadline and an alleged extortion attempt against Indonesia’s national data portal. No independently analyzed ResideLocker binary, encryption routine or reproducible malware sample was recovered, so the persona, campaign brand and claimed malware must remain separate analytical objects.

INFERENCE (confidence: medium): The current profile should be updated through event-level validation rather than by inheriting capabilities from associated personas, channels or adjacent ecosystems.