Trusted Design

Player 1 Limps Back Into the Ring - Hello again, Locky!

概要

Back in May, the Necurs spam botnet jettisoned Locky ransomware in favor of the new Jaff ransomware variant. However, earlier this month Kaspersky discovered a vulnerability within Jaff which allowed them to create a decryptor. This turn of events seems to have caused the miscreants behind Necurs to scramble to distribute a different ransomware payload. Falling back on their old tricks, they have selected to re-distribute Locky ransomware. The malware is being transmitted via email using an .exe file encapsulated within two compressed .zip archives.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Necurs Botnet Fuels Massive Spam Campaigns Spreading Jaff Ransomware (score: 0.73)
• ZEDSEC - JAFF Ransomware IOC (score: 0.72)
• Locky Ransomware Spreads via Flash and Windows Kernel Exploits (score: 0.70)
• Locky: New Ransomware Mimics Dridex-Style Distribution (score: 0.67)
• From Locky with love – reading malicious attachments (score: 0.66)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る