Lok Ransomware

▤ Summary

Named Lok Ransomware, the threat utilizes a strong cryptographic algorithm in its encryption process. After it initiates its programming, the Lok Ransomware will affect a large number of filetypes including documents, PDFs, databases, archives and more. More specifically, the threat will append a character string acting as the victims ID, followed by an email address controlled by the attackers, and finally .lok as a new extension. It clarifies that without paying for the decryptor tool and decryption possessed by the cybercriminals, restoration of the affected files is close to impossible. Victims also are instructed to locate a specific file that was created by threat in the C:/ProgramData directory.

▦ Linked Companies

EnigmaSoft

$1M to $5M