Everything about Locky
Ransomware program
Locky is ransomware malware released in 2016. It is delivered by email with an attached Microsoft Word document that contains malicious macros. When the user opens the document, it appears to be full of gibberish, and includes the phrase "Enable macro if data encoding is incorrect," a social engineering technique. If the user does enable macros, they save and run a binary file that downloads the actual encryption Trojan, which will encrypt all files that match particular extensions. Filenames are converted to a unique 16 letter and number combination. Initially, only the .locky file extension was used for these encrypted files. Subsequently, other file extensions have been used, including .zepto, .odin, .aesir, .thor, and .zzzzz. After encryption, a message instructs them to download the Tor browser and visit a specific criminal-operated Web site for further information. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: LockyA 5-minute orientation
- Pick up a classic book: Breiding & Lockie catalogue of pure bred first class poultryThe most-reprinted book on the subject
- Read the landmark paper: A Multi-Classifier Network-Based Crypto Ransomware Detection System: A Case Study of Locky RansomwareCited 152 times
- Go sideways: CryptoLockerA closely related topic
- Go sideways: Necurs botnetA closely related topic
📖 Definitions
Adjective Having locks or tufts.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
A Multi-Classifier Network-Based Crypto Ransomware Detection System: A Case Study of Locky Ransomware
Study and analyze the locky ransomware using malware analysis techniques
Malware: Locky schlägt wieder zu
Malware: Locky schlägt wieder zu
Malware: Locky schlägt wieder zu
EVALUATION OF CLASSIFICATION ALGORITHMS ON LOCKY RANSOMWARE USING WEKA TOOL
Antony Gormley, Locky Morris, City Walls, Derry from 5 May
Réinsertion transosseuse du ligament interosseux scapho-lunaire par ancre résorbable BioPush-Locky (Arthrex) et une approche exclusivement arthroscopique
📚 Books worth reading
Breiding & Lockie catalogue of pure bred first class poultryBreiding & Lockie (Firm) · 1878
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- CryptoLocker The CryptoLocker ransomware attack was a cyberattack using the CryptoLocker ransomware that occurred from 5 September 2013 to late May 2014. The attack…
- Necurs botnet The Necurs botnet is a distributor of many pieces of malware, most notably Locky. Around June 1, 2016, the botnet went offline, perhaps due to a glitch…
- Dridex Dridex, also known as Bugat and Cridex, is a type of malware that specializes in stealing bank credentials through a system that utilizes macros from Microsoft…
- TeslaCrypt TeslaCrypt was a ransomware trojan. It is now defunct, and its master key was released by the developers. In its early forms, TeslaCrypt targeted game-play…
- KeRanger KeRanger (also known as OSX.KeRanger.A) is a ransomware trojan horse targeting computers running macOS. Discovered on March 4, 2016, by Palo Alto Networks…
- Jigsaw (ransomware) Jigsaw is a form of encrypting ransomware malware created in 2016. It was initially titled "BitcoinBlackmailer", but later came to be known as "Jigsaw"…
- Emotet Emotet is a malware strain and a cybercrime operation believed to be based in Ukraine. The malware, also known as Heodo, was first detected in 2014 and…
- Philadelphia (ransomware) "Philadelphia" is a type of encrypting ransomware malware created in 2016. It was originally sold and distributed by the Brazilian hacker group, The Rainmaker…