The ransomware family DeadLock uses Polygon smart contracts to distribute proxy server addresses to evade security detection. This malware interacts with the Polygon network through embedded JS code in HTML files, aiming to establish covert communication channels, with multiple variants already appearing.