Trusted Design

Locky Domain Analysis Uncovers Over 130 Related Indicators

概要

The ThreatSTOP Research Team has been monitoring new Indicators of Compromise for Locky ransomware since its debut, and has analyzed hundreds of relevant indicators. During our analysis on these indicators, we noticed four outstanding domains – legitimate-looking domains with the addition of the string “qq” or “ff” at the end of the domain name. These domains sparked a follow up analysis that led to the finding of over 130 indicators. The full analysis can be found here: https://blog.threatstop.com/2016/04/08/locky-ransomware-domains-followup-research/

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Locky: New Ransomware Mimics Dridex-Style Distribution (score: 0.67)
• Locky Ransomware Cybercriminals introduce New RockLoader Malware (score: 0.67)
• Necurs Botnet Returns With Updated Locky Ransomware In Tow (score: 0.63)
• 2016-06-06 Magnitude EK Sibling Domains (score: 0.63)
• Spear-phishing based Locky distribution (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る