LockOn Ransomware
Posted: October 13, 2017
Threat Metric
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
Threat Level: | 10/10 |
---|---|
Infected PCs: | 61 |
First Seen: | October 13, 2017 |
---|---|
OS(es) Affected: | Windows |
The LockOn Ransomware is a file-encryption Trojan, which seems to be based on HiddenTear and is yet to be finished. The current version of the LockOn Ransomware was found on an online file-scanning service, and it seems only to encrypt the files stored in the directory 'C:\Users\Exploits\Desktop\test\.' Since this will not cause any damage to just about every computer, it is highly unlikely that the authors of the LockOn Ransomware will begin to distribute their harmful program in its current state. After completing the encryption stage, the LockOn Ransomware is programmed to display a ransom message in a new window, which contains a Bitcoin wallet address and some additional data.
The authors of the LockOn Ransomware appear to have included translations in English and French, as well as a button, which can be clicked to check if the payment of the victim has been processed. However, the latter button is labeled 'test,' and it does not appear to function at the moment.
Even if the LockOn Ransomware gets finished and its authors begin to spread the threatening program, there's still a significant chance that their victims will be able to recover from the attack without paying any money to the attackers. Regardless of this, it is recommended to take all necessary security measures that can help you avoid ransomware attacks, as well as the consequences that such attacks may cause. The first line of defense should be installing and running a reputable anti-virus software suite that will help keep you safe from corrupted files and digital content. Since ransomware attacks target files, it also is a good idea to use a backup service that can provide you with reserve copies of your files in case they get damaged by ransomware or another cyber threat.
If somehow you end up getting your files locked by a working version of the LockOn Ransomware that does not just encrypt the 'test' directory on your desktop, then you need to remember that paying the ransom sum is not a viable solution. The cyber crooks behind threats like this one often lie to their victims and will not provide them with a decryptor even after they receive the money they asked for. The best way to counter the LockOn Ransomware is to eliminate the harmful program with the help of an anti-malware scanner, and then use a HiddenTear decryption utility to recover the encrypted data.
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.