Locky Ransomware Uses Similarities From Dridex

Locky Ransomware Uses Similarities From Dridex

In this article AJR discuss Locky Ransomware Uses Similarities From Dridex

There’s a new strain of ransomware to be aware of, similar to Dridex, which goes by the name of Locky.

Ransomware is malware which locks files (encrypting them) on the victim’s computer, and demands payment to decrypt them. It’s a threat to both consumers and businesses – and indeed small businesses are increasingly finding themselves the target of cyber-attackers and ransom demands.

How Dridex Infects computers

Locky is apparently normally delivered (like Dridex) in a Word document attached to an email, disguised as an invoice that needs a macro. If the document is opened and macros are enabled on the victim’s PC, the ransomware will take hold.

Typically, the subject line of the malicious email will be: “ATTN: Invoice_J-<8-digits>”, where ‘<8-digits>’ is an eight figure number.

As ever, be very careful around any Word attachment you receive no matter what the source. If there’s anything suspicious about the file name or message content, it’s always better to be safe than sorry.

Dridex link

Palo Alto Networks highlighted this threat (as spotted by PC World), and noted: “Researchers suspect there is a link between the Dridex botnet affiliate 220 and Locky due to similar styles of distribution, overlapping filenames, and an absence of campaigns from this particularly aggressive affiliate coinciding with the initial emergence of Locky.”

If this ransomware does hit your machine, it will demand payment in Bitcoins.

Andrew Marriott
Owner & Founder at AJR Solutions
I am a technical & creative guy who loves technology. From a very young age, I have had a passion for technology, website / graphic design and photography. I work hard & play harder, I’m driven and full of enthusiasm with a passion to help others. Technology, digital design, web development & creative photography are areas I am really passionate about.

In the past i have worked for a leading IT Solutions & Managed service provider in Rotherham dealing with a range of IT platforms, such as - on site field engineering and remote support, dealing with all types of servers such as Virtual & Physical, Hyper–V, VMware, Windows server 2012 R2, SBS - Small Business Server 2008 2011, SQL, Terminal, Exchange, Active Directory, Group Policy, TCP, IP, DNS, DHCP, VPN, RDP, hybrid & cloud, Office 365 and managed security solutions such as Antivirus and Spam filtering.

Prior to this, I worked for Wickersley School & Sports College as the Lead IT & Network Technician and also supporting local primary schools with IT Support and engineering visits & Project Management, while also running my own company AJR Solutions, providing IT & Creative Solutions.

I’m very creative and have a huge passion for design and love how design can have a massive impact on a business image, presence and value also visit -

www.thelogocreative.co.uk | www.ajr-designs.co.uk | www.rotherhamwebdesign.co.uk

Also part of the AJR Solutions Group of businesses.