Locky

GPTKB entity

Statements (32)
Predicate Object
gptkbp:instanceOf malware
gptkbp:acceptsPaymentMethod gptkb:Bitcoin
gptkbp:associatedWith gptkb:Necurs_botnet
gptkbp:category malware
gptkbp:discoveredBy security researchers
gptkbp:encryption user files
gptkbp:fileExtensionAfterEncryption .aesir
.locky
.odin
.osiris
.thor
.zepto
gptkbp:firstAppearance 2016
https://www.w3.org/2000/01/rdf-schema#label Locky
gptkbp:notableFor 2016
frequent code updates
large-scale spam campaigns
gptkbp:operatingSystem gptkb:Microsoft_Windows
gptkbp:ransomNoteFile gptkb:_Locky_recover_instructions.txt
HELPDECODING.txt
_HELP_instructions.txt
_WHAT_is.html
gptkbp:requires ransom payment
gptkbp:spreadTo email attachments
exploit kits
malicious macros
gptkbp:status inactive
gptkbp:target individuals
businesses
healthcare organizations
gptkbp:bfsParent gptkb:malware
gptkbp:bfsLayer 4