New Locky ransomware version can operate in offline mode

The program will start encrypting files even if it can’t connect to a command-and-control server.

By Lucian Constantin

The creators of the widespread Locky ransomware have added a fallback mechanism in the latest version of their program for situations where the malware can’t reach their command-and-control servers.

Security researchers from antivirus vendor Avira have found a new Locky variant that starts encrypting files even when it cannot request a unique encryption key from the attacker’s servers because the computer is offline or a firewall blocks the communication.

To read the entire article, please click here.

Source: http://www.csoonline.com/

Facebooktwittergoogle_plusredditlinkedinmail