Trusted Design

Without Necurs, Locky Struggles

概要

Locky has been a devastating force for the last year in the spam and ransomware landscape. The Locky variant of ransomware has been responsible for huge amounts of spam messages being sent on a daily basis. The main driver behind this traffic is the Necurs botnet. This botnet is responsible for the majority of Locky and Dridex activity. Periodically Necurs goes offline and during these periods we typically see Locky activity decrease drastically. One of these periods is currently ongoing.

Created: 2026-02-23

Indicators

• FileHash-SHA256 - 79ffaa5453500f75abe4ad196100a53dfb5ec5297fc714dd10feb26c4fb086db -
• FileHash-SHA256 - 3c476dfbe53259830c458cf8b323cc9aeeb3d63d5f88cc2976716beaf24bd07c -
• domain - bolayde.com -
• FileHash-SHA256 - 20667ee47576765550f9961b87728128c8d9cf88861096c9715c6fce994e347e -
• domain - tangopostale.com -
• domain - unwelcomeaz.top -
• FileHash-SHA256 - ec9c06a7cf810b07c342033588d2e7f5741e7acbea5f0c8e7009f6cc7087e1f7 -
• FileHash-SHA256 - 55d092af73e5631982da6c165dfa704854b92f74eef0846e4b1aad57d0215251 -
• FileHash-SHA256 - 2d51e764bf37e2e8c845d980a4d324e8a1406d04a791a57e6082682ce04517db -
• FileHash-SHA256 - 0822a63725345e6b8921877367e43ee23696d75f712a9c54d5442dbc0d5f2056 -

類似Pulses

• Necurs Botnet Returns With Updated Locky Ransomware In Tow (score: 0.82)
• Necurs Botnet Malspam still pushing Locky ransomware (score: 0.80)
• Necurs Botnet malspam continues pushing Locky (score: 0.77)
• Malware-Traffic-Analysis.net - 2017-10-02 - Necurs Botnet malspam sto;; pushing .ykcol" variant Locky ransomware (score: 0.73)
• Necurs Botnet malspam pushing .ykcol" variant Locky ransomware (score: 0.70)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る