Home Malware Programs Ransomware '.Locked_file File Extension' Ransomware

'.Locked_file File Extension' Ransomware

Posted: September 11, 2017

The '.Locked_file File Extension' Ransomware is a file-locking Trojan that uses encryption for blocking you from opening your files until you pay its ransom for decoding them. Such transactions may not deliver a real decryption solution, and malware experts recommend backing up your media to a secondary device to keep it safe from this threat. Because this Trojan can cause permanent file damage, you always should let your anti-malware programs identify and delete the '.Locked_file File Extension' Ransomware proactively.

Trojans Rearranging the Names of Your Docs

Although identifying a Trojan by its superficial appearance, alone, is often a shortcut that leads towards inaccurate conclusions, the symptoms of an infection can be of limited help to an attentive victim. The '.Locked_file File Extension' Ransomware is the latest example of a Trojan that comes very close to resembling threats like the ApolloLocker Ransomware and Hidden Tear, except for a few details. Unfortunately, the diverging points don't include an implementation worsened significantly of the file-locking attack.

Although malware experts determine that its development isn't complete, the '.Locked_file File Extension' Ransomware is coded in the Delphi programming language and is compatible with most Windows systems. It only encrypts the files that it locks on the victim's PC partially, most likely, to save time during the encryption routine. It adds '.locked_file' to the ends of the names of all the content it locks but also includes its threat actor's email address and encodes the remainder of the name's text.

The '.Locked_file File Extension' Ransomware also creates a local Web page for providing ransoming recommendations to its victims: contacting the above email address with the custom-generated ID to pay a fee within seventy-two hours. Like some RaaS families, the '.Locked_file File Extension' Ransomware also offers a limited trial of its decryption solution. Malware experts have been unable to verify the functionality of the decryption software.

Locking Your Media out of Sight of a Trojan's Interference

The '.Locked_file File Extension' Ransomware shows many of the individual features and design choices of Trojans like the Globe Ransomware and Hidden Tear but isn't a close relative of previous threats. Although victims could choose to pay the '.Locked_file File Extension' Ransomware's ransom to unlock their content, the con artists sometimes withhold their decryption services while still accepting the payments. Having a backup stored on a device that's not vulnerable to being encrypted or deleted by threats like the '.Locked_file File Extension' Ransomware can keep your media safe without any financial risk.

If its threat actor completes it, the '.Locked_file File Extension' Ransomware could compromise PCs by both semi-consensual methods, such as phishing emails, as well as non-consensual ones, like brute-force login attacks initially. Adhering to proven password maintenance protocols, disabling unsafe Web-browsing features, and scanning new files with your security software can eliminate most of the vulnerabilities that remote attackers could exploit. A majority of anti-malware products, particularly when they're using up-to-date databases, should remove the '.Locked_file File Extension' Ransomware and other, file-locking threats immediately.

Regarding a Trojan infection, what's in a name is up to the remote attacker's whims entirely. How the '.Locked_file File Extension' Ransomware and similar threats choose to rename your documents are equally likely of being a clue to their ancestries, a misleading breadcrumb trail, or a social engineering sleight of hand.

Loading...