Blog Post

Locky Ransomware

Mar 22, 2016

"Locky" feels like quite a cheery-sounding name, but it's also the nickname of a new strain of ransomware, so-called because it renames all your important files so that they have the extension .locky.

Of course, it doesn’t just rename your files, it scrambles them first, and – as you may already know about ransomware – only the bad guys have the decryption key and will happily sell it to you.

The most common way that Locky arrives is as follows:
You receive an email containing an attached document such as Troj/DocDl-BCF.
When you open the document it looks like gobbledegook.
At the top of the document it advises you to enable macros “if the data encoding is incorrect.”

DO NOT Enable Macros! Use SHIFT + DELETE to send the email into oblivion.

Share by: