Lock Ransomware

The Lock Ransomware threat is powerful enough to cause severe damage to the computers it infects. This destructive potential is not impacted by the fact that the Lock Ransomware is a variant of the Babuk Ransomware strain. Indeed, victims will be completely locked out of accessing their own data. The documents, images, archives, photos, databases, and other file types stored on the device will be encrypted and rendered inaccessible. Each locked file will have '.lock' appended to its original name.

The Lock Ransomware will deliver a ransom note to the victim's device as a text file named 'How To Restore Your Files.txt' created on the desktop of the device. Reading the message left by the cybercriminals will still leave the affected users or organizations with a lot of questions. The ransom note doesn't mention the size of the demanded ransom or if the attackers are willing to decrypt a couple of files for free, as a demonstration. Instead, the ransom note simply urges victims to establish communication with the threat actors via their Tox chat account or the 'locksupport@onionmail.org' email address.

The full text of the ransom note is:

'LOCK

All of your files have been encrypted!

Your computer was infected with a ransomware virus. Your files have been encrypted and you won't
be able to decrypt them without our help. What can I do to get my files back? You can buy our special
Decryption Software, this Software will allow you to recover all of your data and remove the
ransomware from your computer.

To buy Decryption Software write to us Tox or email!

email: locksupport@onionmail.org

Tox: 83D1D8DEE8E2CE986CA02E132BE1C00AD2C382 A1CC90962C780F7D3A13B55A29C7748C5DD973

Download Tox hxxps://tox.chat/download.html'