Locky is ransomware malware released in 2016. It is delivered by email with an attached Microsoft Word document that contains malicious macros. When the user opens the document, it appears to be full of gibberish, and includes the phrase "Enable macro if data encoding is incorrect," a social engineering technique. If the user does enable macros, they save and run a binary file that downloads the actual encryption Trojan, which will encrypt all files that match particular extensions. Filenames are converted to a unique 16 letter and number combination. Initially, only the .locky file extension was used for these encrypted files. Subsequently, other file extensions have been used, including .zepto, .odin, .aesir, .thor, and .zzzzz. After encryption, a message instructs them to download the Tor browser and visit a specific criminal-operated Web site for further information.
FAQ
- Where can I find Locky live shows?
- Open Locky in the SoundOff app for personalized upcoming show picks based on your own concert history.
- How do SoundOff fans rank Locky?
- SoundOff uses head-to-head comparisons instead of star ratings. Fans who logged Locky compare sets to build a personal ranking over time.
Get an alert next time Locky plays near you.