สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool LockFile

Threat Group Cards: A Threat Actor Encyclopedia

Tool: LockFile

Names	LockFile
Category	Malware
Type	Ransomware
Description	A ransomware first observed in July 2021.
Information	<https://news.sophos.com/en-us/2021/08/23/proxyshell-vulnerabilities-in-microsoft-exchange-what-to-do/> <https://www.microsoft.com/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself> <https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/lockfile-ransomware-new-petitpotam-windows> <https://news.sophos.com/en-us/2021/08/27/lockfile-ransomwares-box-of-tricks-intermittent-encryption-and-evasion/> <https://www.secureworks.com/research/bronze-starlight-ransomware-operations-use-hui-loader> <https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-hacked-to-deploy-hive-ransomware/> <https://decoded.avast.io/threatintel/decryptor-for-atomsilo-and-lockfile-ransomware/> <https://nsfocusglobal.com/insights-into-ransomware-spread-using-exchange-1-day-vulnerabilities-1-2/> <https://thehackernews.com/2021/08/lockfile-ransomware-bypasses-protection.html> <https://blog.cyble.com/2021/08/25/lockfile-ransomware-using-proxyshell-attack-to-deploy-ransomware/> <https://news.sophos.com/en-us/2022/03/17/the-ransomware-threat-intelligence-center/>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.lockfile>

Last change to this tool card: 29 December 2022

Download this tool card in JSON format

All groups using tool LockFile

Changed	Name	Country	Observed
APT groups
	Bronze Starlight		2021-Mar 2023

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]