Malware Corpus Tracker - Info Whitepapers - locky

Families
Info
Corpus
Download Sites
C2 Sites
Phish Sites
Ransom Sites
Attackers
About

Info for Family: locky

PublishedFamilyAuthor - Title
2017-11-01 01:11 locky Malware-Traffic-Analysis.net - Necurs Botnet malspam stops using DDE, still uses Word docs to push Locky
2017-10-10 11:10 locky Racco42 / Pastebin - 2017-10-10 Locky "Voicemail From 845-551-NNNN"
2017-10-09 15:10 locky Racco42 / Twitter - 917411865776533504
2017-10-09 10:10 locky Racco42 / Pastebin - 2017-10-09 Locky "New voice message"
2017-10-03 12:10 locky Racco42 / Pastebin - 2017-10-03 Locky "Emailing - DOCNNN"
2017-10-03 07:10 locky Racco42 / Pastebin - 2017-10-03 Locky "INVOICE"
2017-10-03 06:10 locky ring0x0 / Pastebin - locky downloader changed
2017-10-03 01:10 locky Malware-Traffic-Analysis.net - Necurs Botnet malspam sto;; pushing ".ykcol" variant Locky ransomware
2017-10-02 15:10 locky Racco42 / Pastebin - 2017-10-02 Locky "Emailed Invoice - NNNNNN"
2017-09-29 12:09 locky coldshell / Twitter - 913735730509307904
2017-09-29 06:09 locky Pastebin - Locky (29/09/2017)
2017-09-27 14:09 locky Racco42 / Pastebin - 2017-09-27 Locky "Scanned image from MX-2600N"
2017-09-27 04:09 locky Racco42 / Pastebin - 2017-09-26 Locky "INVOICE"
2017-09-27 03:09 locky Racco42 / Pastebin - 2017-09-26 Locky "Invoice PISxxxxxxx"
2017-09-22 08:09 locky Racco42 / Pastebin - 2017-09-22 Locky "Your Invoice"
2017-09-21 04:09 locky Racco42 / Pastebin - 2017-09-21 Locky "Invoice RE-2017-09-21-00168"
2017-09-20 14:09 locky Racco42 / Pastebin - 2017-09-20 Locky "New voice message"
2017-09-20 06:09 locky Racco42 / Pastebin - 2017-09-20 Locky "Your Payment # NNNN"
2017-09-20 03:09 locky Racco42 / Pastebin - 2017-09-20 Locky "Status of invoice A217xxx"
2017-09-19 21:09 locky Racco42 / Twitter - 910251032915083264
2017-09-19 16:09 locky Racco42 / Pastebin - 2017-09-19 Locky "HERBALIFE Order Number"
2017-09-19 16:09 locky Racco42 / Pastebin - 2017-09-19 Locky "Emailing - 1000800NNNN"
2017-09-19 10:09 locky coldshell / Twitter - 910089307708383232
2017-09-19 05:09 locky Pastebin - Locky (19/09/2017)
2017-09-18 15:09 locky Racco42 / Pastebin - 2017-09-18 Locky "Message from KM_C224e"
2017-09-18 09:09 locky coldshell / Twitter - 909704853110317058
2017-09-18 03:09 locky Pastebin - Locky (18/09/2017)
2017-09-11 07:09 locky Malware-Traffic-Analysis.net - Blank Slate malspam pushes "Lukitus" variant Locky ransomware
2017-09-08 08:09 locky Racco42 / Pastebin - 2017-09-08 Locky "Emailed Invoice"
2017-09-08 08:09 locky coldshell / Twitter - 906067475791532033
2017-09-08 03:09 locky Pastebin - Locky (08/09/2017)
2017-09-07 21:09 locky James_inthe_box / Twitter - 905904209932951553
2017-09-07 17:09 locky Racco42 / Pastebin - 2017-09-07 Locky "Microsoft Store E-invoice for your order"
2017-09-07 16:09 locky James_inthe_box / Pastebin - Locky Sep 7
2017-09-07 07:09 locky Racco42 / Pastebin - Untitled
2017-09-06 20:09 locky Racco42 / Twitter - 905526704554303488
2017-09-06 15:09 locky Racco42 / Pastebin - Untitled
2017-09-05 10:09 locky Racco42 / Twitter - 905017085675401216
2017-09-05 08:09 locky Racco42 / Twitter - 904987775748988929
2017-09-05 07:09 locky Racco42 / Twitter - 904975665384050690
2017-09-05 06:09 locky James_inthe_box / Pastebin - Locky Sep 5
2017-09-05 05:09 locky Racco42 / Pastebin - 2017-09-05 Locky "Scanning"
2017-09-05 03:09 locky Racco42 / Pastebin - 2017-09-05 Locky "New voice message"
2017-09-05 02:09 locky Racco42 / Pastebin - 2017-09-05 Locky "Invoice from Verizon"
2017-09-01 10:09 locky Racco42 / Twitter - 903568113379274752
2017-09-01 05:09 locky Racco42 / Pastebin - 2017-01-09 Locky "New voice message"
2017-08-31 17:08 locky https://pastebin.com/iZhbgVnx
2017-08-31 12:08 locky coldshell / Twitter - 903232028581253124
2017-08-30 06:08 locky Pastebin - Locky (30/08/2017)
2017-08-28 11:08 locky coldshell / Twitter - 902127809228918784
2017-08-28 06:08 locky Pastebin - Locky (28/08/2017)
2017-08-18 10:08 locky 7jm4j - Ghostbin
2017-08-18 09:08 locky coldshell / Twitter - 898474763139653632
2017-08-18 04:08 locky Pastebin - Locky (17/08/2017)
2017-08-17 14:08 locky coldshell / Twitter - 898184075999137792
2017-08-17 10:08 locky Bill Brenner / Naked Security - It’s baaaack: Locky ransomware is on the rise again
2017-08-17 09:08 locky Pastebin - Locky (17/08/2017)
2017-08-17 07:08 locky coldshell / Twitter - 898087713844457472
2017-08-17 02:08 locky Pastebin - Locky (17/08/2017)
2017-08-16 20:08 locky xorsthings / Twitter - 897920247877029891
2017-08-16 15:08 locky Danny Palmer / ZDNet - Locky ransomware is back from the dead again - with new 'Diablo' and 'Lukitus' variants
2017-08-16 14:08 locky Lawrence Abrams / BleepingComputer - Locky Ransomware switches to the Lukitus extension for Encrypted Files
2017-08-16 11:08 locky coldshell / Twitter - 897777479389245441
2017-08-14 06:08 locky Pastebin - Locky (14/08/17)
2017-06-26 12:06 locky coldshell / Twitter - 879314196164468737
2017-06-26 11:06 locky dvk01uk / Twitter - 879300919732711424
2017-06-26 07:06 locky Pastebin - Locky 26/06/2017
2017-06-23 11:06 locky Ionut Arghire - Necurs Botnet Distributing Locky Ransomware via Fake Invoices | SecurityWeek.Com
2017-06-22 14:06 locky Vencislav Krustev / How to, Technology and PC Security Forum | SensorsTechForum.com - Locky and Cerber Ransomware Viruses Both Updated (June 2017)
2017-06-22 12:06 locky coldshell / Twitter - 877866694475001858
2017-06-22 07:06 locky Pastebin - Locky 22/06/2017
2017-06-22 03:06 locky Catalin Cimpanu / BleepingComputer - Locky Ransomware Returns, but Targets Only Windows XP & Vista
2017-06-22 03:06 locky tmmalanalyst / Twitter - 877727009023049729
2017-06-22 02:06 locky 06-21-2017 Locky Ransomware: Config Analysis
2017-06-21 23:06 locky VK_Intel / Twitter - 877665385251823620
2017-06-21 22:06 locky MarceloRivero / Twitter - 877649164447793156
2017-06-21 22:06 locky MarceloRivero / Twitter - 877649164447793156
2017-06-21 21:06 locky Alexander Chiu -
Player 1 Limps Back Into the Ring - Hello again, Locky!
2017-06-21 15:06 locky peterkruse / Twitter - 877541836319064064
2017-06-21 15:06 locky Myonlinesecurity / My Online Security - The return of Locky with fake invoice emails
2017-05-10 18:05 locky PolarToffee / Twitter - 862375490514034688
2017-05-04 16:05 locky Swapnil Patil,Yin Hong Chang,Sudeep Singh,Robert Venal / FireEye - Dridex and Locky Return Via PDF Attachments in Latest Campaigns
2017-04-21 23:04 locky Malwarebytes Labs / Malwarebytes Labs - Locky ransomware is back, but we already protect against it
2017-04-21 12:04 locky Myonlinesecurity / My Online Security - The return of Locky ransomware with fake receipts malspam
2017-02-07 10:02 locky @securityaffairs / Security Affairs - Phishme observed operators behind Locky and Sage ransomware share delivery infrastructure
2017-02-07 04:02 locky Felix Weyne - Inside the Necurs botnet: the origin of Locky malspam
2017-02-05 04:02 locky Trojan-Downloader:JS/Locky: Deobfuscate and Extract IOCs
2017-02-02 16:02 locky @phishme / PhishMe - Sage and Locky Ransomware Now Sharing Delivery Infrastructure in Phishing Attacks
2017-02-01 15:02 locky SecurityBeard / Twitter - 826821515173838849
2017-01-31 03:01 locky Malware-Traffic-Analysis.net - Afraidgate Rig-V from 194.87.94.4 sends Locky ransomware
2017-01-19 19:01 locky Tom Spring / Threatpost | The first stop for security news - Locky Limps Back into Action After Lull
2017-01-18 23:01 locky Nick Biasini - Without Necurs, Locky Struggles
2017-01-16 08:01 locky @phishme / PhishMe - Kovter Ad Fraud Trojan Now Shipping with Locky Ransomware
2017-01-13 11:01 locky Tomas Meskauskas / PCrisk.com - Online Security - .Odin Ransomware
2017-01-13 11:01 locky Tomas Meskauskas / PCrisk.com - Online Security - *.thor Ransomware
2017-01-13 11:01 locky Tomas Meskauskas / PCrisk.com - Online Security - *.zzzzz Ransomware
2017-01-13 11:01 locky Tomas Meskauskas / PCrisk.com - Online Security - *.osiris Ransomware
2016-12-20 06:12 locky Racco42 / Pastebin - 2016-12-20 Locky "for printing"
2016-12-19 17:12 locky Racco42 / Pastebin - 2016-12-19 Locky "Tracking Sheet"
2016-12-19 17:12 locky Racco42 / Pastebin - 2016-12-19 Locky "Payslip for the month Dec 2016"
2016-12-16 07:12 locky Racco42 / Pastebin - 2016-12-16 Locky "Message from RNP00xxxxxxxxxx"
2016-12-16 06:12 locky Racco42 / Pastebin - 2016-12-16 Locky "Subscription Details"
2016-12-16 05:12 locky Racco42 / Pastebin - 2016-12-15 Locky "Payment Processing Problem"
2016-12-16 05:12 locky Racco42 / Pastebin - 2016-12-16 Locky "Attached document"
2016-12-15 08:12 locky Racco42 / Pastebin - 2016-12-15 Locky "Order Receipt"
2016-12-14 17:12 locky Racco42 / Pastebin - 2016-12-14 Locky "Amount Payable"
2016-12-14 17:12 locky Racco42 / Pastebin - 2016-12-14 Locky "DOC, FAX, PHOTO, SCAN_xxxx"
2016-12-14 16:12 locky Racco42 / Pastebin - 2016-12-14 Locky "Attached document"
2016-12-14 05:12 locky Racco42 / Pastebin - 2016-12-14 Locky "Booking confirmation"
2016-12-14 04:12 locky Racco42 / Pastebin - 2016-12-14 Locky "Parcel Certificate"
2016-12-13 17:12 locky Racco42 / Pastebin - 2016-12-13 Locky "a picture for you"
2016-12-13 04:12 locky Racco42 / Pastebin - 2016-12-13 Locky "Bill for paper 2016-12-13"
2016-12-12 18:12 locky Racco42 / Pastebin - 2016-12-12 Locky "Payment Confirmation"
2016-12-12 12:12 locky Racco42 / Pastebin - 2016-12-12 Locky "Invoice number: xxxxx"
2016-12-12 12:12 locky Racco42 / Pastebin - 2016-12-12 Locky "New(xxx)"
2016-12-12 10:12 locky Racco42 / Pastebin - 2016-12-12 Locky "Attached, Copy, Emailing, File"
2016-12-12 05:12 locky Racco42 / Pastebin - 2016-12-12 Locky "Software License"
2016-12-09 04:12 locky Racco42 / Pastebin - 2016-12-09 Locky "Firewall Software"
2016-12-08 11:12 locky Myonlinesecurity / My Online Security - more random orders with long random reference number malspam delivers locky
2016-12-07 02:12 locky Racco42 / Pastebin - 2016-12-06 Locky "receipt"
2016-12-06 04:12 locky Racco42 / Pastebin - 2016-12-06 Locky "Recent order"
2016-12-06 03:12 locky Racco42 / Pastebin - 2016-12-05 Locky "Invoice INV0000xxxxxx"
2016-12-05 12:12 locky SecurityBeard / Twitter - 805752739703771136
2016-12-05 07:12 locky Racco42 / Pastebin - 2016-12-05 Locky "Please Consider This"
2016-12-05 05:12 locky Racco42 / Pastebin - 2016-12-05 Locky "Emailing" / no subject
2016-12-05 02:12 locky Racco42 / Pastebin - 2016-12-05 Locky "05122016xxxxxx"
2016-12-02 14:12 locky Racco42 / Pastebin - 2016-12-02 Locky "Attached document"
2016-12-02 09:12 locky Racco42 / Pastebin - 2016-12-02 Locky "Please Pay Attention"
2016-12-02 07:12 locky Racco42 / Pastebin - 2016-12-02 Locky "Emailing: EPSxxxxxx"
2016-11-30 05:11 locky Racco42 / Pastebin - 2016-11-30 Locky "Attached Image"
2016-11-30 02:11 locky Racco42 / Pastebin - 2016-11-29 Locky "[Scan] 201611dd hh:mm:ss"
2016-11-29 12:11 locky SecurityBeard / Twitter - 803571114144370688
2016-11-29 06:11 locky Racco42 / Pastebin - 2016-11-29 Locky "For Your Consideration"
2016-11-28 18:11 locky Racco42 / Pastebin - 2016-11-28 Locky "Insufficient funds"
2016-11-28 10:11 locky Myonlinesecurity / My Online Security - Urgent Alert we have detected a suspicious money ATM withdrawal from your card delivers Locky
2016-11-28 07:11 locky Racco42 / Pastebin - 2016-11-28 Locky "Urgent Alert"
2016-11-25 07:11 locky Racco42 / Pastebin - 2016-11-25 Locky "Important Information"
2016-11-25 06:11 locky Racco42 / Pastebin - 2016-11-25 Locky "Overdue Invoice"
2016-11-24 17:11 locky Racco42 / Pastebin - 2016-11-24 Locky "It Is Important"
2016-11-24 10:11 locky Racco42 / Pastebin - 2016-11-24 Locky "Fax transmission"
2016-11-24 07:11 locky Racco42 / Pastebin - 2016-11-24 Locky "scan paper"
2016-11-23 15:11 locky Racco42 / Pastebin - 2016-11-23 Locky "Attention Required"
2016-11-22 03:11 locky Racco42 / Pastebin - 2016-11-21 Locky "Receipt"
2016-11-21 22:11 locky Malware-Traffic-Analysis.net - "Aesir" variant Locky malspam
2016-11-21 14:11 locky @securityaffairs / Security Affairs - Watch out, Locky ransomware spread via SVG images on Facebook Messenger
2016-11-21 10:11 locky Myonlinesecurity / My Online Security - Locky delivered by spoofed Your Amazon.com order has dispatched
2016-11-21 10:11 locky Myonlinesecurity / My Online Security - Locky changed to use .aesir file extension and changed C2 format
2016-11-21 10:11 locky malwrhunterteam / Twitter - 800649796579102720
2016-11-21 04:11 locky Racco42 / Pastebin - 2016-11-21 Locky "Spam mailout"
2016-11-09 17:11 locky Racco42 / Pastebin - 2016-11-09 Locky "unauthorize access"
2016-11-09 15:11 locky Racco42 / Pastebin - 2016-11-09 Locky "Message from KMBT_C220"
2016-11-09 15:11 locky Racco42 / Pastebin - 2016-11-09 Locky "Fuel Card E-bill"
2016-11-09 04:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Your Amazon order has dispatched"
2016-11-09 01:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Fax transmission"
2016-11-08 13:11 locky Pastebin - evening locky
2016-11-08 13:11 locky @phishme / PhishMe - Unscrupulous Locky Threat Actors Impersonate US Office of Personnel Management to Deliver Ransomware
2016-11-08 13:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Your parcel has arrived"
2016-11-08 11:11 locky SC Magazine US - Locky ransomware spreading via Bizarro Sundown EK
2016-11-08 11:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Order NNNNN"
2016-11-08 10:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Epson iPrint"
2016-11-08 06:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Suspicious movements"
2016-11-08 05:11 locky Racco42 / Pastebin - 2016-11-08 Locky "Statement"
2016-11-08 04:11 locky Racco42 / Pastebin - 2016-11-07 Locky "Financial documents"
2016-11-08 02:11 locky Racco42 / Pastebin - 2016-11-07 Locky "Health insurance"
2016-11-08 01:11 locky Racco42 / Pastebin - 2016-11-07 Locky "[Scan] 2016-1107"
2016-11-07 10:11 locky Racco42 / Pastebin - 2016-11-07 Locky "Scanned image from MX2310U"
2016-11-04 16:11 locky Racco42 / Pastebin - 2016-11-04 Locky "Please find attached invoice"
2016-11-04 10:11 locky Brooks Li and Joseph C. Chen (Threats Analysts) / TrendLabs Security Intelligence Blog - New Bizarro Sundown Exploit Kit Spreads Locky
2016-11-04 00:11 locky malwarebreakdown / MALWARE BREAKDOWN - Malspam Contains WSF, Downloads Locky (.thor) (/linuxsucks.php)
2016-11-03 23:11 locky malwarebreakdown / MALWARE BREAKDOWN - “Urgent Payment Request” Malspam Leads to Locky (.thor) (/message.php)
2016-11-03 05:11 locky Racco42 / Pastebin - 2016-11-03 Locky "Urgent payment request"
2016-11-02 16:11 locky Racco42 / Pastebin - 2016-11-02 Locky "Fax transmission"
2016-11-02 06:11 locky Racco42 / Pastebin - 2016-11-02 Locky "part X"
2016-11-02 05:11 locky Racco42 / Pastebin - 2016-11-01 Locky "Invoice No. xxxxxxxx"
2016-11-02 03:11 locky Racco42 / Pastebin - 2016-11-01 Locky "DSCFxxxx.pdf"
2016-11-01 11:11 locky Conrad Longmore / Dynamoo - Malware spam: "This is to inform that the transaction you made yesterday is declined." leads to Locky
2016-10-31 14:10 locky Conrad Longmore / Dynamoo - Malware spam: "SureVoIP" / "Voicemail from.." leads to Locky
2016-10-31 10:10 locky Conrad Longmore / Dynamoo - Malware spam: "Wrong tracking number" leads to Locky
2016-10-31 08:10 locky Racco42 / Pastebin - 2016-10-31 Locky "Document No xxxxxx"
2016-10-30 22:10 locky malwarebreakdown / MALWARE BREAKDOWN - Malspam Leads to Locky (.shit) (/linuxsucks.php)
2016-10-28 13:10 locky Racco42 / Pastebin - 2016-10-28 Locky "DOC, FAX, IMG, SCAN"
2016-10-27 14:10 locky Racco42 / Pastebin - 2016-10-27 Locky "Receipt"
2016-10-25 09:10 locky Racco42 / Pastebin - 2016-10-25 Locky "<Files> NNN"
2016-10-24 08:10 locky Racco42 / Pastebin - 2016-10-24 Locky "Receipt"
2016-10-24 07:10 locky Racco42 / Pastebin - 2016-10-24 Locky "Complaint letter"
2016-10-24 03:10 locky Racco42 / Pastebin - 2016-10-24 Locky "Freebox"
2016-10-13 15:10 locky Warren Mercer - LockyDump - All Your Configs Are Belong To Us
2016-10-06 17:10 locky Racco42 / Pastebin - 2016-10-06 Locky "wrong paychecks"
2016-09-28 03:09 locky Brad / SANS Internet Storm Center - Rig Exploit Kit from the Afraidgate Campaign
2016-09-28 02:09 locky Malware-Traffic-Analysis.net - pcap and malware for an ISC diary
2016-09-27 15:09 locky Flashpoint - Anatomy of Locky and Zepto Ransomware
2016-09-27 14:09 locky @flashpointintel / Flashpoint - Anatomy of Locky and Zepto Ransomware
2016-09-27 00:09 locky Brad Antoniewicz / OpenDNS Umbrella Blog - Odin is Locky's Latest Persona
2016-09-26 13:09 locky Is it the End of Angler ?
2016-09-22 16:09 locky SC Magazine - Locky ransomware pushers keeping things fresh using many new attachments
2016-09-22 15:09 locky Lyle Frink / Avira Blog - Locky takes the wheel again
2016-09-22 09:09 locky Trend Micro / TrendLabs Security Intelligence Blog - From RAR to JavaScript: Ransomware Figures in the Fluctuations of Email Attachments
2016-09-22 00:09 locky Myonlinesecurity / My Online Security - Receipt of payment malspam delivers Locky
2016-09-21 15:09 locky Brad / SANS Internet Storm Center - Those never-ending waves of Locky malspam
2016-09-20 02:09 locky Racco42 / Pastebin - 2016-09-20 Locky "Tracking data"
2016-09-19 17:09 locky Racco42 / Pastebin - 2019-09-19 Locky "<no subject>"
2016-09-19 15:09 locky Bradley Barth, Senior Reporter / SC Magazine - Locky developers upgrade ransomware's ability to perform offline encryption
2016-09-19 11:09 locky Racco42 / Pastebin - 2016-09-19 Locky "Tracking number"
2016-09-19 04:09 locky Racco42 / Pastebin - 2016-09-19 Locky "Express Parcel service"
2016-09-16 22:09 locky Diwakar Dinkar,Rahamathulla Hussain / McAfee - Locky Ransomware Hides Inside Packed .DLL
2016-09-16 19:09 locky vkremez / GitHub - /Locky
2016-09-16 19:09 locky vrtadmin / GitHub - /locky
2016-09-16 06:09 locky Racco42 / Pastebin - 2016-09-16 Locky "IMG, FAX, DOC, SCAN"
2016-09-16 05:09 locky Racco42 / Pastebin - 2016-09-16 Locky "Re: request"
2016-09-15 15:09 locky SC Magazine - Quant Loader trojan downloader spotted in the wild
2016-09-15 12:09 locky reminesjoseph / The Merkle - Analysis of New Trojan Reveals That it Might Not be so New
2016-09-14 15:09 locky Racco42 / Pastebin - 2016-09-14 Locky "Renewed License"
2016-09-14 05:09 locky Racco42 / Pastebin - 2016-09-14 Locky "Delivery confirmation: XXXXXX"
2016-09-14 03:09 locky Racco42 / Pastebin - 2016-09-14 Locky "Account report"
2016-09-13 18:09 locky Racco42 / Pastebin - 2016-09-13 Locky "payment copy"
2016-09-13 17:09 locky Racco42 / Pastebin - 2016-09-13 Locky "Equipment receipts"
2016-09-13 04:09 locky Racco42 / Pastebin - 2016-09-13 Locky "Accounts Documentation - Invoices"
2016-09-13 03:09 locky Racco42 / Pastebin - 2016-09-02 Locky "xxxxxgif, xxxxxtiff, xxxxxpdf"
2016-09-13 02:09 locky Racco42 / Pastebin - 2016-09-05 Locky "Credit card receipt"
2016-09-12 18:09 locky Racco42 / Pastebin - 2016-09-06 Locky "Invoice INV0000xxxxx"
2016-09-12 17:09 locky Pastebin - locky Confirmation letter
2016-09-12 17:09 locky Racco42 / Pastebin - 2016-09-12 Locky "Budget report"
2016-09-12 09:09 locky Racco42 / Pastebin - 2016-09-12 Locky & Pony "Image / Photo / Document / Picture"
2016-09-12 04:09 locky Racco42 / Pastebin - 2016-09-12 Locky "Please find attached invoice no xxxxx"
2016-09-09 09:09 locky Racco42 / Pastebin - Locky "Documents Requested"
2016-09-08 09:09 locky Racco42 / Pastebin - Locky "<number>.(gif|png|jpg|tiff|docx|pdf)"
2016-09-08 06:09 locky Racco42 / Pastebin - Locky "[Vigor2820 Series] New voice mail message from"
2016-09-07 04:09 locky Racco42 / Pastebin - Locky "Agreement form"
2016-09-06 15:09 locky Racco42 / Pastebin - Locky "Suspected Purchases"
2016-09-06 05:09 locky Pastebin - Locky "August invoice"
2016-09-06 02:09 locky Pastebin - Locky "Copy"
2016-09-06 00:09 locky Malware Breakdown: Malspam contains ZIP'd WSF that retrieves Locky
2016-09-06 00:09 locky Myonlinesecurity / My Online Security - Invoice INV0000385774 malspam delivers Locky
2016-09-05 15:09 locky Pastebin - Locky "87b3ff3rc"
2016-09-05 14:09 locky Racco42 / Pastebin - Locky "copies"
2016-09-05 14:09 locky 0xtadavie / Twitter - 772796495280111616
2016-09-05 08:09 locky Conrad Longmore / Dynamoo - Malware spam: "We are sending you the credit card receipt from yesterday. Please match the card number and amount."
2016-09-02 05:09 locky Racco42 / Pastebin - Locky "@icloud.com"
2016-09-02 04:09 locky Racco42 / Pastebin - Locky "old office facilities"
2016-09-01 18:09 locky Racco42 / Pastebin - Locky "Scanned image from MX2301U"
2016-09-01 14:09 locky Racco42 / Pastebin - Locky "Travel expense sheet"
2016-09-01 06:09 locky Racco42 / Pastebin - Locky "Please find attached invoice no:"
2016-09-01 05:09 locky Racco42 / Pastebin - Locky "Confirmation"
2016-08-31 17:08 locky Racco42 / Pastebin - Locky "Voice Message from Outside Caller"
2016-08-31 14:08 locky Racco42 / Pastebin - Locky "flight tickets"
2016-08-31 08:08 locky Racco42 / Pastebin - Locky "jhBHTYl"
2016-08-31 03:08 locky Racco42 / Pastebin - Locky "bank transactions"
2016-08-30 17:08 locky Racco42 / Pastebin - Locky "FW: [Scan] 2016-08-13"
2016-08-30 08:08 locky Racco42 / Pastebin - Locky "987nkjh8"
2016-08-29 11:08 locky Brooks Li (Threats Analyst) / TrendLabs Security Intelligence Blog - Locky Ransomware Now Downloaded as Encrypted DLLs
2016-08-29 11:08 locky Brooks Li (Threats Analyst) / TrendLabs Security Intelligence Blog - Locky Ransomware Now Downloaded as Encrypted DLLs
2016-08-29 08:08 locky Racco42 / Pastebin - Locky "Please find attached invoice no. X"
2016-08-29 06:08 locky Racco42 / Pastebin - Locky "Commission"
2016-08-26 13:08 locky SC Magazine - Latest Locky version on the loose
2016-08-24 00:08 locky Myonlinesecurity / My Online Security - Emailing: Image15.jpg malspam using HTA files delivers Locky ransomware
2016-08-22 00:08 locky Myonlinesecurity / My Online Security - Today’s fax malspam word macros leads to Locky ransomware
2016-08-19 19:08 locky Healthcare IT News - Massive Locky ransomware attacks hit U.S. hospitals
2016-08-19 15:08 locky @securityaffairs / Security Affairs - A new LOCKY ransomware campaign targets the healthcare
2016-08-19 05:08 locky Pastebin - Untitled
2016-08-18 22:08 locky Malware-Traffic-Analysis.net - Afraidgate Neutrino EK from 176.31.223.167 sends Locky ransomware
2016-08-18 15:08 locky Tom Spring / Threatpost | The first stop for security news - Locky Targets Hospitals In Massive Wave Of Ransomware Attacks
2016-08-18 15:08 locky Danny Palmer / ZDNet - 'Massive' Locky ransomware campaign targets hospitals
2016-08-18 14:08 locky Conrad Longmore / Dynamoo - Malware spam: "The office printer is having problems so I've had to email the UPS label"
2016-08-18 01:08 locky Catalin Cimpanu / softpedia - Locky Ransomware Spam Campaigns Switch to Macro-Based Distribution
2016-08-17 16:08 locky Ronghwa Chong / FireEye - Locky Ransomware Distributed Via DOCM Attachments in Latest Email Campaigns
2016-08-16 09:08 locky Pastebin - locky downloads subject: blank 2
2016-08-15 13:08 locky Conrad Longmore / Dynamoo - Malware spam: "Jen [Jen@purple-office.com]" / "Documents from Purple Office - IN00003993"
2016-08-15 12:08 locky Conrad Longmore / Dynamoo - Malware spam: "Emma Critchley (emmacritchley@advantage-finance.co.uk)" / "Emailing - 9104896607509"
2016-08-15 10:08 locky Conrad Longmore / Dynamoo - Malware spam: "orderconfirmation@esab.co.uk" / "Order Confirmation-7069-2714739-20160815-292650"
2016-08-15 00:08 locky Trend Micro / TrendLabs Security Intelligence Blog - New Locky Ransomware Spotted in the Brazilian Underground Market, Uses Windows Script Files
2016-08-12 15:08 locky Conrad Longmore / Dynamoo - Malware spam: This E-mail was sent from "CUKPR0329001" (Aficio MP C305).
2016-08-11 12:08 locky Conrad Longmore / Dynamoo - Malware spam: "New Doc" / "Scanned by CamScanner" / "Sent from Yahoo Mail on Android"
2016-08-09 05:08 locky Racco42 / Pastebin - Locky "Documents Requested"
2016-08-08 05:08 locky Racco42 / Pastebin - Locky "988g765f"
2016-08-07 23:08 locky Catalin Cimpanu / softpedia - Security Researcher Tricks Tech Support Scammer Into Installing Locky Ransomware
2016-08-05 04:08 locky Racco42 / Pastebin - Locky "8t76v45"
2016-08-04 16:08 locky Racco42 / Pastebin - Locky "Budget Reports"
2016-08-04 11:08 locky Conrad Longmore / Dynamoo - Malware spam: "Please sign the receipt attached for the arrival of new office facilities." leads to Locky
2016-08-04 10:08 locky Conrad Longmore / Dynamoo - Malware spam: "Business card" / "I have attached the new business card design." leads to Locky
2016-08-04 04:08 locky Racco42 / Pastebin - Locky "Business card"
2016-08-04 04:08 locky Racco42 / Pastebin - Locky "h78r3gfe"
2016-08-03 12:08 locky Conrad Longmore / Dynamoo - Malware spam: "Confirmation letter" leads to Locky
2016-08-03 10:08 locky Conrad Longmore / Dynamoo - Malware spam: "As you directed, I send the attachment containing the data about the new invoices"
2016-08-03 07:08 locky Racco42 / Pastebin - Locky "Confirmation letter"
2016-08-03 06:08 locky Racco42 / Pastebin - Locky "Fw: New invoices"
2016-08-03 03:08 locky Racco42 / Pastebin - Locky "report"
2016-08-03 00:08 locky Conrad Longmore / Dynamoo - Malware spam: "I attached the project status report in order to update you about the last meeting"
2016-08-02 11:08 locky Conrad Longmore / Dynamoo - Malware spam: "Please see the attached last month’s paid bills for the company" leads to Locky
2016-08-02 05:08 locky Racco42 / Pastebin - Locky "Paid bills"
2016-08-01 14:08 locky Lawrence Abrams / BleepingComputer - Zepto Ransomware Locky Variant being distributed via WSF Attachments
2016-08-01 14:08 locky Racco42 / Pastebin - Locky "Sales charts"
2016-08-01 13:08 locky Conrad Longmore / Dynamoo - Malware spam: "Please review the attached corrected annual report." / "Corrected report"
2016-07-29 11:07 locky Conrad Longmore / Dynamoo - Malware spam: "Voicemail from Anonymous" / SureVoIP [voicemailandfax@surevoip.co.uk]
2016-07-29 10:07 locky Brad Duncan / Palo Alto Networks - Afraidgate: Major Exploit Kit Campaign Switches from CryptXXX Ransomware Back to Locky
2016-07-29 05:07 locky Racco42 / Pastebin - Locky "Bank account record"
2016-07-29 03:07 locky Racco42 / Pastebin - Locky "Foundation plan"
2016-07-28 10:07 locky @itproportal / ITProPortal - Two thirds of malicious emails in Q2 contained Locky | .com
2016-07-28 10:07 locky @reaqta / ReaQta - Locky Dropper Now Comes Embedded in the Loader
2016-07-28 08:07 locky Racco42 / Pastebin - Locky "Scanned image from copier"
2016-07-27 19:07 locky Racco42 / Pastebin - Locky "annual report"
2016-07-27 06:07 locky Racco42 / Pastebin - Locky "updated details"
2016-07-26 09:07 locky Racco42 / Pastebin - Locky "list of activities"
2016-07-26 06:07 locky Racco42 / Pastebin - Locky "okp987g7v"
2016-07-25 21:07 locky Cybrary - PowerWare Ransomware Masquerades as Locky to Intimidate Victims
2016-07-25 12:07 locky Conrad Longmore / Dynamoo - Malware spam: "Emailing: Photo 25-07-2016, 34 80 10" / "Emailing: Document 25-07-2016, 72 35 48"
2016-07-25 08:07 locky Pastebin - Untitled
2016-07-25 06:07 locky Pastebin - Untitled
2016-07-22 06:07 locky Pastebin - Untitled
2016-07-20 07:07 locky Pastebin - Locky
2016-07-19 20:07 locky Malware-Traffic-Analysis.net - Afraidgate Neutrino EK from 5.2.72.114 sends Locky ransomware
2016-07-18 17:07 locky Greg Leah / Cloudmark Security Blog - Locky Actors Shift to .wsf Attachments
2016-07-18 12:07 locky Pastebin - Untitled
2016-07-18 05:07 locky Pastebin - Untitled
2016-07-16 15:07 locky Pastebin - Untitled
2016-07-15 06:07 locky Pastebin - New Locky distribution sites - 15/07/2016
2016-07-15 01:07 locky Malware-Traffic-Analysis.net - Afraidgate Neutrino EK from 5.2.72.236 sends Locky ransomware
2016-07-14 20:07 locky Lucian Constantin / PCWorld - New Locky ransomware version can operate in offline mode
2016-07-14 20:07 locky Lucian Constantin / PCWorld - New Locky ransomware version can operate in offline mode
2016-07-14 16:07 locky Pastebin - Untitled
2016-07-13 18:07 locky Lyle Frink / Avira Blog - Locky goes offline (by design)
2016-07-13 09:07 locky Päivi Tynninen / News from the Lab - A New High For Locky
2016-07-12 21:07 locky Conrad Longmore / Dynamoo - Malware spam: "Please find attached the profile of Mr.X for a suitable role in your Organisation" leads to Locky
2016-07-12 17:07 locky Pastebin - Locky 2016-07-12 #2, Subject: Profile
2016-07-12 14:07 locky Conrad Longmore / Dynamoo - Malware spam: "Here's that excel file (latest invoices) that you wanted." leads to Locky
2016-07-12 09:07 locky Pastebin - New Locky distribution sites - 12/07/2016
2016-07-06 13:07 locky Conrad Longmore / Dynamoo - Malware spam with random hexadecimal number leads to Locky
2016-07-05 13:07 locky Conrad Longmore / Dynamoo - Malware spam: "Scanned image" leads to Locky
2016-07-05 09:07 locky Pastebin - Untitled
2016-07-01 04:07 locky Sudeep Singh,Jonell Baltazar ,Joonho Sa / FireEye - Locky is Back Asking for Unpaid Debts
2016-06-29 22:06 locky Conrad Longmore / Dynamoo - Malware spam: "Documents copies" / "I am sending copies of the documents as attachments."
2016-06-29 16:06 locky Pastebin - Untitled
2016-06-29 12:06 locky Conrad Longmore / Dynamoo - Malware spam: "Financial report" / "I have attached the financial report you requested."
2016-06-29 12:06 locky reddit - Locky ransomware new campaign payload nodes and callback CNC nodes • /r/Malware
2016-06-29 12:06 locky reddit - Locky ransomware new campaign payload nodes and callback CNC nodes • /r/Malware
2016-06-29 12:06 locky reddit - Locky ransomware campaign June 25th 2015 • /r/Malware
2016-06-29 12:06 locky reddit - Locky Ransomware campaign June 27th 2016 • /r/Malware
2016-06-29 12:06 locky reddit - Locky Ransomware campaign June 27th 2016 • /r/Malware
2016-06-29 12:06 locky reddit - Locky ransomware campaign June 28th 2016 • /r/Malware
2016-06-28 10:06 locky Conrad Longmore / Dynamoo - Malware spam: "report" / "I致e attached the report you asked me to send." leads to Locky
2016-06-28 03:06 locky Malware-Traffic-Analysis.net - Monday malspam hunt - Locky
2016-06-27 21:06 locky Conrad Longmore / Dynamoo - Malware spam: "Updated" / "Attached please find the documents you requested.." / "King regards"
2016-06-27 15:06 locky SecurityWeek News - New Locky Variants Change Communication Patterns | SecurityWeek.Com
2016-06-27 14:06 locky Conrad Longmore / Dynamoo - Malware spam: "Requested document" / "The document you requested is attached" leads to Locky
2016-06-27 12:06 locky Conrad Longmore / Dynamoo - Malware spam: DOC1234 / document4321 / Document56789 leads to Locky
2016-06-27 00:06 locky Nicholas Griffin - Locky Returned With A New Anti-VM Trick | Forcepoint
2016-06-24 11:06 locky Kevin Townsend - 50 Hackers Using Lurk Banking Trojan Arrested in Russia | SecurityWeek.Com
2016-06-24 11:06 locky SecurityWeek News - Macro Malware Makes Improvements on Hiding Malicious Code | SecurityWeek.Com
2016-06-24 11:06 locky SecurityWeek News - Locky Campaign Ramps Up as Necurs Botnet Returns | SecurityWeek.Com
2016-06-24 06:06 locky Locky JS and URL Revealer | Kahu Security
2016-06-23 09:06 locky Conrad Longmore / Dynamoo - Malware spam: "Final version of the report" probably leads to Locky
2016-06-22 16:06 locky Alberto Ortega / Nibbleblog - Undefined blog title - Plug it, play it, burn it, rip it - rdtsc x86 instruction to detect virtual machines
2016-06-22 15:06 locky Conrad Longmore / Dynamoo - Malware spam: "Corresponding Invoice" leads to Locky
2016-06-22 07:06 locky hFireF0X / Twitter - 745526542663487488
2016-06-22 02:06 locky malcat - Return of Locky – Malcat! Mew!
2016-06-21 19:06 locky Conrad Longmore / Dynamoo - Malware spam: "Please find attached our invoice for services rendered and additional disbursements in the above-mentioned matter."
2016-06-21 17:06 locky Pastebin - New Locky distribution sites - 22/06/2016
2016-06-21 14:06 locky MalwareTech - What's Happening with Necurs, Dridex, and Locky?
|
2016-06-06 16:06 locky GossiTheDog / Twitter - 739859770379751424
2016-06-01 02:06 locky Spiceworks, Inc. / The Spiceworks Community - Locky Ransomware - Encrypts Documents, Databases, Code, BitCoin Wallets and ...
2016-06-01 02:06 locky Peter Nelson - Locky Ransomware Analysis - Stern Security
2016-06-01 02:06 locky LookingGlass Cyber Solutions Inc. - Widespread Malspam Campaign Delivering Locky Ransomware
2016-06-01 02:06 locky SecurityWeek News - Locky Ransomware Gets New Infection Vector, Improved Evasion | SecurityWeek.Com
2016-06-01 02:06 locky Jonell Baltazar ,Joonho Sa / FireEye - New Downloader for Locky
2016-05-31 14:05 locky Website - Evolution And History Of Locky Ransomware | BCW
2016-05-31 14:05 locky Malware-Traffic-Analysis.net - Tuesday malspam hunt - more Locky (always more Locky)
2016-05-31 11:05 locky Conrad Longmore / Dynamoo - Malware spam: "You have 1 new message from bank manager. To read it, please open the attachment down below. "
2016-05-31 11:05 locky SensePost | Understanding locky
2016-05-31 00:05 locky Myonlinesecurity / My Online Security - Fraudlent Behavior – Account Suspended malspam delivers #Locky
2016-05-30 10:05 locky @reaqta / ReaQta - Locky Ransomware Shipping With a New Loader
2016-05-27 14:05 locky Update your Browser - Browser-Update.org
2016-05-27 13:05 locky Lucian Constantin / Network World - New JavaScript spam wave distributes Locky ransomware
2016-05-27 13:05 locky Lucian Constantin / Network World - New JavaScript spam wave distributes Locky ransomware
2016-05-27 11:05 locky Conrad Longmore / Dynamoo - Malware spam: "As per our discussion yesterday, please find attached the amended meeting minutes."
2016-05-27 10:05 locky Conrad Longmore / Dynamoo - Malware spam: "Neue Abrechnung Nr. 746441" / support@sipcall.de
2016-05-27 00:05 locky @youtube / YouTube - Malware Analysis - Unpacking Locky with VirtualAlloc
2016-05-27 00:05 locky Myonlinesecurity / My Online Security - » Neue Abrechnung Nr. 090092 support@sipcall.org delivers malware
2016-05-26 16:05 locky Tom Spring / Threatpost | The first stop for security news - Amazon Users Targets of Massive Locky Spear-Phishing Campaign
2016-05-26 10:05 locky Conrad Longmore / Dynamoo - Malware spam: "Please find attached a document containing our responses to the other points which we discussed.."
2016-05-25 13:05 locky Conrad Longmore / Dynamoo - Malware spam: "Weekly report" / "Please find attached the Weekly report."
2016-05-25 12:05 locky Conrad Longmore / Dynamoo - Malware spam: "URGENT - DELIVERY" / "Jobin Jacob / "HYTEX"
2016-05-25 11:05 locky Conrad Longmore / Dynamoo - Malware spam: "Operational Expense" leads to Locky
2016-05-24 12:05 locky Retooled Locky Ransomware Pummels Healthcare Sector
2016-05-24 00:05 locky Myonlinesecurity / My Online Security - » SAFARI LPO [MAL] 337659 leads to Locky
2016-05-24 00:05 locky Myonlinesecurity / My Online Security - » We Have Received Your Payment – Thank You (#49407B2) delivers Locky
2016-05-23 11:05 locky Conrad Longmore / Dynamoo - Malware spam: "Please find attached the file we spoke about yesterday" leads to Locky
2016-05-21 13:05 locky Tom Spring / Threatpost | The first stop for security news - Microsoft Warns of Sneaky New Macro Trick
2016-05-11 12:05 locky Conrad Longmore / Dynamoo - Malware spam: Emailing: Photo 05-11-2016, 03 26 04
2016-05-11 00:05 locky Myonlinesecurity / My Online Security - » SPAM MALWARE: “Emailing: Photo 05-11-2016, 82 95 82” delivers #Locky
2016-05-11 00:05 locky Myonlinesecurity / My Online Security - » SPAM MALWARE: random subjects “You may refer to the attached document for details” delivers #Locky
2016-05-10 20:05 locky Conrad Longmore / Dynamoo - Malware spam: "As promised, the document you requested is attached" leads to Locky
2016-05-10 17:05 locky Malware-Traffic-Analysis.net - Tuesday malspam hunt - Cerber, Locky, and Portuguese malspam
2016-05-07 20:05 locky @securityaffairs / Security Affairs - STUPID LOCKY! Hackers disrupted a Locky ransomware Campaing
2016-05-06 00:05 locky Myonlinesecurity / My Online Security - » I have attached the spreadsheet contains last 50 transaction and your account actual balance – JS malware delivers Locky
2016-05-06 00:05 locky Myonlinesecurity / My Online Security - » Sent from my Samsung device Scan – word doc macro malware delivering #Locky
2016-05-05 15:05 locky Yuri Ilyin / Kaspersky Lab Business Blog - Ransomware: surprising champions
2016-05-03 12:05 locky Conrad Longmore / Dynamoo - Malware spam: "You Are Fired" leads to Locky
2016-05-03 00:05 locky Myonlinesecurity / My Online Security - » FINAL NOTICE – OUTSTANDING ACCOUNT – JS malware delivers #Locky
2016-05-02 23:05 locky AES-128 Locky Ransomware - How to Remove Malware - Malware [Beta] - Sophos Community
2016-05-02 09:05 locky Lyle Frink / Avira Blog - Locky ransomware goes into lockdown mode
2016-04-29 10:04 locky Conrad Longmore / Dynamoo - Malware spam: "Second Reminder - Unpaid Invoice"
2016-04-29 08:04 locky Conrad Longmore / Dynamoo - Malware spam: "Attached Doc" / "Attached Image" / "Attached Document" / "Attached File"
2016-04-29 03:04 locky Trend Micro / TrendLabs Security Intelligence Blog - Locky Ransomware Spreads via Flash and Windows Kernel Exploits
2016-04-28 11:04 locky Conrad Longmore / Dynamoo - Malware spam: "FW: Invoice" from multiple senders
2016-04-28 10:04 locky Conrad Longmore / Dynamoo - Minimalist spam leads to Locky ransomware
2016-04-28 00:04 locky Myonlinesecurity / My Online Security - RE: Outstanding Account – JS malware »
2016-04-28 00:04 locky Myonlinesecurity / My Online Security - FW: Invoice – JS malware »
2016-04-27 15:04 locky Conrad Longmore / Dynamoo - Malware spam: Message from "RNP0BB8A7" / CLAUDIA MARTINEZ leads to Locky
2016-04-27 11:04 locky Conrad Longmore / Dynamoo - Malware spam: "Thank you. Our latest price list is attached. For additional information, please contact your local ITT office."
2016-04-27 00:04 locky Myonlinesecurity / My Online Security - Please see attached file regarding clients recent bill – JS malware »
2016-04-19 13:04 locky Conrad Longmore / Dynamoo - Malware spam: "Facture : 1985 corrigée" / "Louis - Buvasport [louis64@buvasport.com]"
2016-04-19 02:04 locky "Locky" Ransomware Encrypts Unmapped Network Shares | SecurityWeek.Com
2016-04-19 02:04 locky Macro Malware Dridex, Locky Using Forms to Hide Code | SecurityWeek.Com
2016-04-18 16:04 locky David Bisson / Graham Cluley - Decryption tool released for Locky ransomware impersonator
2016-04-16 17:04 locky Lawrence Abrams / BleepingComputer - Decrypted: The new AutoLocky Ransomware fails to impersonate Locky
2016-04-12 14:04 locky Neera Desai,Ronnie Tokazowski,Paul Burbage,Brendan Griffin / PhishMe - RockLoader – New Upatre-like Downloader Pushed by Dridex, Downloads all the Malwares
2016-04-11 11:04 locky Check Point Blog - New Locky Variant Implements Evasion Techniques |
2016-04-07 12:04 locky Nyebodnye / My Online Security - Your Latest Documents from Angel Springs Ltd [STA054C] – word doc macro malware leads to Locky Ransomware
2016-04-07 12:04 locky TechHelpList.com - Dossier n° ... - CABINET BETTAN - Malware
2016-04-06 23:04 locky Proofpoint - Locky Ransomware Cybercriminals Continue Email Campaign Innovation, Introduce New RockLoader Malware | Proofpoint
2016-04-05 18:04 locky Tom Spring / Threatpost | The first stop for security news - Locky Variant Changes C2 Communication, Found in Nuclear EK
2016-04-05 07:04 locky Fedor Sinitsyn - Locky: the encryptor taking the world by storm - Securelist
2016-04-04 11:04 locky Check Point Blog - New Locky Ransomware Variant Implementing Changes in Communication Patterns
2016-04-04 10:04 locky Diego Perez,Diego Perez / We Live Security - Analysis of the Locky infection process
2016-04-01 14:04 locky Sylvain Sarméjeanne / Lexsi Security Hub - A new dynamic vaccine against Locky
2016-04-01 14:04 locky Sylvain Sarméjeanne / Lexsi Security Hub - A new dynamic vaccine against Locky
2016-03-25 00:03 locky Haowei Ren,Jonell Baltazar ,Joonho Sa,Ronghwa Chong,Alex Berry / FireEye - Surge in Spam Campaign Delivering Locky Ransomware Downloaders
2016-03-23 16:03 locky Sean Gallagher / Ars Technica - Kentucky hospital hit by ransomware attack
2016-03-22 11:03 locky Sylvain Sarméjeanne / Lexsi Security Hub - Abusing bugs in the Locky ransomware to create a vaccine (update 2)
2016-03-22 00:03 locky Brian Krebs - Hospital Declares ‘Internal State of Emergency’ After Ransomware Infection — Krebs on Security
2016-03-21 13:03 locky Brad Duncan / Palo Alto Networks - Locky Ransomware Installed Through Nuclear EK
2016-03-12 00:03 locky Marc Rivero López / McAfee - Locky Ransomware Arrives via Email Attachment
2016-03-10 22:03 locky Tom Spring / Threatpost | The first stop for security news - Locky Ransomware Spreading in Massive Spam Attack
2016-03-10 00:03 locky Avast - A closer look at the Locky ransomware
2016-03-08 13:03 locky TechHelpList.com - Compensation - Reference Number #... - Malware
2016-03-08 00:03 locky Fortinet Blog - CryptoWall, TeslaCrypt and Locky: A Statistical Perspective
2016-03-07 12:03 locky TechHelpList.com - E-Service (Europe) Ltd Invoice No: ... - Malware
2016-03-04 10:03 locky Russell Nolen,Russell Nolen / Carbon Black - Tracking Locky Ransomware Using
2016-03-03 07:03 locky Alan Woodward - Tor Suddenly Goes Into Reverse (Again)
2016-03-03 01:03 locky SC Magazine UK - .Onion address growth suggests Locky surge
2016-03-02 07:03 locky Check Point Blog - Locky Ransomware
2016-03-01 13:03 locky TechHelpList.com - Delay with Your Order #..., Invoice #... - Malware
2016-03-01 00:03 locky Hasherezade / Malwarebytes Labs - Look Into Locky Ransomware
2016-02-29 09:02 locky Ian Murphy / Enterprise Times - Forcepoint exposes Locky domains
2016-02-26 09:02 locky Alan Woodward - Is Locky Back?
2016-02-25 11:02 locky Pastebin - locky download urls - 2016-02-25-A
2016-02-25 10:02 locky Alan Woodward - Tor Hidden Services Yoyo
2016-02-22 18:02 locky Andy Patel / News from the Lab - Locky: Clearly Bad Behavior
2016-02-21 11:02 locky Alan Woodward - Curiouser & Curiouser: Tor Hidden Services Rollercoaster Continues
2016-02-20 18:02 locky DidierStevens / SANS Internet Storm Center - Locky: JavaScript Deobfuscation
2016-02-19 13:02 locky Alan Woodward - Is The Tor Increase Malware?
2016-02-19 11:02 locky Nicholas Griffin - The Many Evolutions of Locky | Forcepoint
2016-02-19 09:02 locky Kevin Beaumont / Medium - Locky experiments with Windows Script Host delivery
2016-02-19 02:02 locky SR-FI_Team - Feeling even Locky-er
2016-02-19 00:02 locky sofia.luis / HubSpot - Locky ransomware, metrics and protection
2016-02-18 20:02 locky @LG_CTIG / Dead Drop - Fake Invoice Malspam Campaign Delivering Locky Ransomware
2016-02-18 12:02 locky TechHelpList.com - Invoice - finds you well - various - Malware
2016-02-18 11:02 locky Heimdal Security Blog - Security Alert: New Locky Ransomware Shows Off through Rampant Distribution
2016-02-18 11:02 locky Chris Brook / Threatpost | The first stop for security news - Locky Ransomware Borrows Tricks from Dridex
2016-02-18 09:02 locky Conrad Longmore - Dynamoo's Blog: Malware spam: Copy of Invoice 20161802-12345678 leads to Locky ransomware
2016-02-18 00:02 locky Rakesh Krishnan / The Hacker News - How Just Opening an MS Word Doc Can Hijack Every File On Your System
2016-02-18 00:02 locky Symantec Security Response - Locky ransomware on aggressive hunt for victims
2016-02-17 22:02 locky Brendan Griffin / PhishMe - Locky - New Malware Borrowing Ideas From Dridex and Other Ransomware
2016-02-17 14:02 locky http://www.theinquirer.net - Dridex-style 'Locky' ransomware is infecting machines via Microsoft Word | TheINQUIRER
2016-02-17 12:02 locky Paul Ducklin / Naked Security - “Locky” ransomware – what you need to know
2016-02-17 10:02 locky Milena Dimitrova - AES-128 Encryption Employed by Locky Ransomware
2016-02-17 09:02 locky Rady - Locky Ransomware | malekal's site
2016-02-17 02:02 locky Fortinet Blog - A Closer Look at Locky Ransomware
2016-02-17 01:02 locky AlienVault / OTX - Locky: New Ransomware Mimics Dridex-Style Distribution
2016-02-17 00:02 locky Win32/Filecoder.Locky.A | ESET Virusradar
2016-02-17 00:02 locky Proofpoint - Dridex Actors Get In the Ransomware Game With "Locky" | Proofpoint
2016-02-17 00:02 locky Proofpoint - Dridex Actors Get In the Ransomware Game With "Locky" | Proofpoint
2016-02-16 17:02 locky Lawrence Abrams / BleepingComputer - The Locky Ransomware Encrypts Local Files and Unmapped Network Shares
2016-02-16 17:02 locky Kevin Beaumont / Medium - Locky ransomware virus spreading via Word documents
2016-02-16 16:02 locky Brandon Levene,Micah Yates,Rob Downs / Palo Alto Networks - Locky: New Ransomware Mimics Dridex-Style Distribution
2016-02-16 00:02 locky Malekal's forum • Locky Ransomware (Crypto-Ransomware) : Ransomware
2016-02-01 13:02 locky Graham Cluley - Email from your photocopier? It could be a malware attack
2016-02-01 11:02 locky Dennis Schirrmacher / Security - Aktuell im Umlauf: Trojaner-Mail im Namen des Kopierers verschickt
2016-01-21 16:01 locky by - Locky Variant Changes C2 Communication, Found in Nuclear EK – Tech Win
2015-12-15 15:12 locky Kate Kochetkova - Locky ransomware: one email can take all data away
2015-10-19 07:10 locky L. Maik - Remove Locky Ransomware and Restore .locky Encrypted Files |
2015-10-14 18:10 locky Forbes Welcome
2015-08-26 09:08 locky Brooks Li (Threats Analyst) / TrendLabs Security Intelligence Blog - You searched for Locky
2014-04-01 17:04 locky Lucian Constantin / Computerworld - Free Bitdefender tool prevents Locky, other ransomware infections, for now
2008-03-01 02:03 locky Nick / Microsoft Malware Protection Center - Malicious macro using a sneaky new trick
2008-03-01 02:03 locky adwbust / Microsoft Malware Protection Center - JavaScript-toting spam emails: What should you know and how to avoid them?
1988-01-20 04:01 locky Cloud Security Solutions | Zscaler - A look at Locky ransomware

Info for child families:

PublishedFamilyAuthor - Title
necurs https://www.blueliv.com/necurs-one-of-the-worlds-biggest-botnets-today/
2018-10-04 02:10 kovter Kovter Malware Fileless Persistence Mechanism - IBM X-Force Collection
2018-10-04 01:10 kovter Threat Spotlight: The Truth About Fileless Malware
2018-10-04 01:10 kovter Threat Spotlight: Kovter Malware Fileless Persistence Mechanism
2018-09-07 15:09 kovter Brandon Wunderle - Kovter Killer: How to Remediate the APT of Clickjacking »
2018-01-18 16:01 necurs Jaeson Schultz -
The Many Tentacles of the Necurs Botnet
2017-11-01 20:11 necurs Malware-Traffic-Analysis.net - Necurs Botnet malspam continues pushing Locky
2017-11-01 01:11 necurs Malware-Traffic-Analysis.net - Necurs Botnet malspam stops using DDE, still uses Word docs to push Locky
2017-10-31 13:10 necurs Myonlinesecurity / My Online Security - blank emails with fake invoice attachments deliver Locky ransomware via word docs with embedded OLE objects
2017-10-30 20:10 necurs Malware-Traffic-Analysis.net - Necurs Botnet malspam uses DDE attack to push Locky
2017-10-24 23:10 necurs Malware-Traffic-Analysis.net - Necurs Botnet malspam uses DDE attack to push Locky
2017-10-24 18:10 necurs Myonlinesecurity / My Online Security - Locky ransomware delivered via DDE exploit Scan Data malspam no-reply@victim domain
2017-10-24 12:10 necurs Myonlinesecurity / My Online Security - Another Locky ransomware fake Invoice malspam campaign using DDE "exploit"
2017-10-19 20:10 necurs Brad / SANS Internet Storm Center - A global cooperative cyber threat / internet security monitor and alert system. Featuring daily handler diaries with summarizing and analyzing new threats to networks and internet security events.
2017-08-18 08:08 kovter KOVTER: An Evolving Malware Gone Fileless - Security News - Trend Micro USA
2017-07-31 16:07 necurs NECURS: The Malware That Breaks Your Security - Threat Encyclopedia - Trend Micro USA
2017-07-31 16:07 necurs Backdoor.Necurs!gen8 Technical Details | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs!gen7 Technical Details | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs!gen5 Technical Details | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs!gen4 Technical Details | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs!gen3 | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs!gen2 Technical Details | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs!gen1 Technical Details | Symantec
2017-07-31 16:07 necurs Backdoor.Necurs Technical Details | Symantec
2017-07-31 16:07 necurs Necurs Tracker
2017-07-14 02:07 nemucod SANS Internet Storm Center - InfoSec Handlers Diary Blog - NemucodAES and the malspam that distributes it
2017-07-10 19:07 kovter Malware-Traffic-Analysis.net - More UPS-themed malspam pushing Kovter/Nemucod ransomware
2017-07-10 19:07 kovter Malware-Traffic-Analysis.net - More UPS-themed malspam pushing Kovter/Nemucod ransomware
2017-07-10 19:07 nemucod Malware-Traffic-Analysis.net - More UPS-themed malspam pushing Kovter/Nemucod ransomware
2017-07-04 01:07 kovter Malware-Traffic-Analysis.net - More UPS-themed malspam pushing Kovter malspam
2017-06-30 00:06 kovter Malware-Traffic-Analysis.net - Kovter malspam - UPS delivery theme
2017-06-30 00:06 kovter Malware-Traffic-Analysis.net - Kovter malspam - UPS delivery theme
2017-06-29 07:06 kovter Myonlinesecurity / My Online Security - return of fake UPS cannot deliver malspam with an updated nemucod ransomware and Kovter payload
2017-06-29 07:06 kovter Myonlinesecurity / My Online Security - return of fake UPS cannot deliver malspam with an updated nemucod ransomware and Kovter payload
2017-06-21 21:06 necurs Alexander Chiu -
Player 1 Limps Back Into the Ring - Hello again, Locky!
2017-06-13 14:06 necurs Myonlinesecurity / My Online Security - A busy day with necurs botnet mass malspamming multiple Trickbot campaigns and Jaff ransomware thrown into the mix
2017-06-12 18:06 kovter Analysis of Kovter, a Very Clever Piece of Malware – VIPRE Labs
2017-06-10 03:06 kovter ItsReallyNick / Twitter - 873385083717144577
2017-06-08 21:06 necurs MalwareTech - What’s Happening with Necurs, Dridex, and Locky?
2017-06-08 21:06 necurs motherboard / Motherboard - ​One of the World's Largest Botnets Has Vanished
2017-06-08 21:06 necurs NJCCIC Media / NJCCIC - Necurs
2017-06-08 19:06 necurs Necurs Rootkit – Not New But Spreading Fast Warns Microsoft
2017-06-08 19:06 necurs sofia.luis / HubSpot - Necurs Proxy module with DDOS features
2017-06-08 19:06 necurs sofia.luis / HubSpot - Necurs Proxy module with DDOS features
2017-06-08 18:06 necurs @flashpointintel / Flashpoint - Necurs Botnet Fuels Campaigns Spreading Jaff Ransomware
2017-06-08 18:06 necurs Necurs Tracker
2017-06-08 18:06 necurs @prezi / prezi.com - The Necurs Rootkit
2017-06-08 16:06 necurs Trojan:Win32/Necurs
2017-06-08 01:06 necurs IBM X-Force Exchange
2017-06-07 11:06 necurs SeraphimDomain / Twitter - 872421499877163008
2017-06-07 09:06 necurs dvk01uk / Twitter - 872389560403210246
2017-06-06 10:06 necurs 0xtadavie / Twitter - 872044148068626433
2017-06-06 05:06 necurs Pastebin - Untitled
2017-06-05 14:06 necurs DGAFeedAlerts / Twitter - 871730475550867460
2017-06-05 13:06 necurs DGAFeedAlerts / Twitter - 871715262000754688
2017-06-05 07:06 necurs DGAFeedAlerts / Twitter - 871624647846096896
2017-06-02 07:06 necurs GDPR.Report - Necurs Rootkit spam continues proliferating dating scam
2017-06-01 06:06 kovter Myonlinesecurity / My Online Security - Fake FedEx USPS UPS delivery notifications continue to deliver Kovter and ransomware
2017-05-30 23:05 kovter Malware-Traffic-Analysis.net - Rig EK sends Kovter
2017-05-25 13:05 necurs hexlax / Twitter - 867733755246542848
2017-05-24 16:05 necurs iCyberFighter / Twitter - 867417798288560128
2017-05-16 17:05 necurs @flashpointintel / Flashpoint - Necurs Rootkit Spam Continues Proliferating Dating Scam
2017-05-11 17:05 necurs Malwarebytes Labs / Malwarebytes Labs - New 'Jaff' ransomware via Necurs asks for 2 BTC
2017-04-24 15:04 necurs Limor Kessem / Security Intelligence - The Necurs Botnet: A Pandora's Box of Malicious Spam
2017-04-24 15:04 necurs Limor Kessem / Security Intelligence - The Necurs Botnet: A Pandora's Box of Malicious Spam
2017-04-21 18:04 necurs Nick Biasini -
Threat Spotlight: Mighty Morphin Malware Purveyors: Locky Returns Via Necurs
2017-03-28 00:03 necurs @Symantec / Symantec Security Response - Necurs: Mass mailing botnet returns with new wave of spam campaigns
2017-03-23 08:03 necurs SC Media UK - Necurs botnet drops Locky ransomware, picks up 'financial fraud' spam
2017-03-20 21:03 necurs Edmund Brumaghin -
Necurs Diversifies Its Portfolio
2017-03-20 11:03 necurs Conrad Longmore / Dynamoo -
Pump and dump spam: Incapta Inc (INCT)
2017-03-20 09:03 necurs MalwareTechLab / Twitter - 843760420989157378
2017-03-01 00:03 necurs 92mnv6b.html
2017-02-27 12:02 necurs Tom Spring / Threatpost | The first stop for security news - Necurs Botnet Learns New DDoS Trick
2017-02-24 13:02 necurs Milena Dimitrova / How to, Technology and PC Security Forum | SensorsTechForum.com - Module in Necurs Botnet Could Lead to DDoS Attacks
2017-02-24 09:02 necurs Catalin Cimpanu / BleepingComputer - World's Largest Spam Botnet Adds DDoS Feature
2017-02-17 02:02 necurs @DarkReading / Dark Reading - Massive Necurs Spam Botnet Now Equipped to Launch DDoS Attacks
2017-02-08 08:02 kovter GReAT / Kaspersky - Fileless attacks against enterprise networks
2017-02-07 04:02 necurs Brad / SANS Internet Storm Center - Exploit kits delivering Necurs
2017-02-07 04:02 necurs Botnet Tracker
2017-02-07 04:02 necurs Felix Weyne - Inside the Necurs botnet: the origin of Locky malspam
2017-01-24 18:01 kovter Proofpoint - Kovter Ad Fraud Malware - Clever Macro Trick
2017-01-19 19:01 necurs Tom Spring / Threatpost | The first stop for security news - Locky Limps Back into Action After Lull
2017-01-18 23:01 necurs Nick Biasini -
Without Necurs, Locky Struggles
2017-01-18 23:01 necurs Nick Biasini - Without Necurs, Locky Struggles
2017-01-16 08:01 kovter @phishme / PhishMe - Kovter Ad Fraud Trojan Now Shipping with Locky Ransomware
2016-12-29 12:12 nemucod TrojanDownloader:JS/Nemucod
2016-12-27 07:12 kovter Myonlinesecurity / My Online Security - Spoofed USPS unable to deliver malspam continues to deliver Locky, Kovter and other malware
2016-11-28 17:11 necurs Johannes Bader - The DGAs of Necurs
2016-11-21 16:11 nemucod Michael Mimoso / Threatpost | The first stop for security news - Nemucod Infections Spreading Over Facebook
2016-11-20 19:11 nemucod peterkruse / Twitter - 800414481545187328
2016-09-29 07:09 necurs @securityaffairs / Security Affairs - Necurs botnet: the resurrection of the monster and the rising of spam
2016-09-11 20:09 necurs Trustwave - Necurs – the Heavyweight Malware Spammer
2016-09-02 11:09 necurs CERT Polska - Necurs - hybrid spam botnet
2016-08-16 19:08 nemucod Webroot Threat Blog - Nemucod Ransomware Analysis
2016-08-09 14:08 nemucod Ondrej Kubovič / WeLiveSecurity - Nemucod is back and serving an ad-clicking backdoor instead of ransomware
2016-07-14 19:07 kovter Malwarebytes Labs / Malwarebytes Labs - Untangling Kovter's persistence methods
2016-06-25 14:06 kovter Kovter_Report.pdf
2016-06-22 00:06 tinba https://www.blueliv.com/research/inside-tinba-infection-stage-1/
2016-06-21 14:06 necurs MalwareTech / MalwareTech - What’s Happening with Necurs, Dridex, and Locky?
2016-06-16 14:06 nemucod Guest Writer,Guest Writer / We Live Security - Nemucod ups its game
2016-06-10 13:06 necurs @securityaffairs / Security Affairs - Necurs Botnet, one of the world’s largest malicious architecture has vanished
2016-06-06 16:06 necurs GossiTheDog / Twitter - 739860278456799232
2016-06-04 11:06 necurs VessOnSecurity / Twitter - 739059481766711296
2016-05-31 00:05 necurs Sofia Luis / BitSight - Monitoring Necurs - The tip of the iceberg
2016-05-30 11:05 necurs sofia.luis / HubSpot - Monitoring Necurs - The tip of the iceberg
2016-04-12 14:04 rockloader Neera Desai,Ronnie Tokazowski,Paul Burbage,Brendan Griffin / PhishMe - RockLoader – New Upatre-like Downloader Pushed by Dridex, Downloads all the Malwares
2016-04-08 17:04 rockloader Nelly Vladimirova / Virus Guides - RockLoader Malware Bundled with Locky Ransomware
2016-04-08 10:04 rockloader Myonlinesecurity / My Online Security - CAJA 87889 FACTURA 48024NMX – CK Polendo, Guillermo Navistar.com – word doc macro malware
2016-04-07 12:04 rockloader TechHelpList.com - Dossier n° ... - CABINET BETTAN - Malware
2016-04-06 23:04 rockloader Proofpoint - Locky Ransomware Cybercriminals Continue Email Campaign Innovation, Introduce New RockLoader Malware
2016-03-22 18:03 necurs Reverse Engineering Necurs (Part 4 – IDA Pro’s Python API) – UT Austin Information Security Office
2016-03-15 17:03 necurs Reverse Engineering Necurs (Part 3 – Patching) – UT Austin Information Security Office
2016-03-08 20:03 necurs Reverse Engineering Necurs (Part 2 – Unpacking) – UT Austin Information Security Office
2016-03-02 16:03 necurs Joy Woodruff - Reverse Engineering Necurs (Part 1 – Preliminaries) – UT Austin Information Security Office
2016-02-22 16:02 necurs MalwareTech / MalwareTech - Necurs.P2P – A New Hybrid Peer-to-Peer Botnet
2015-12-20 23:12 kovter TechHelpList.com - Payment for tax refund #... - IRS - Mawlare
2015-12-09 12:12 kovter rp-quarterly-threats-nov-2015.pdf
2015-06-09 11:06 kovter evolution-of-poweliks.pdf
2015-05-20 21:05 necurs SANS Internet Storm Center - InfoSec Handlers Diary Blog - Exploit kits delivering Necurs
2015-05-15 19:05 necurs Malware-Traffic-Analysis.net - Angler EK from 178.63.174.153 - Sends Bedep and Necurs
2015-05-15 19:05 necurs Malware-Traffic-Analysis.net - Nuclear EK from 109.234.37.12 - Sends Necurs
2014-06-02 00:06 necurs Peter Ferrie - curse-necurs-part-3
2014-05-01 00:05 necurs Peter Ferrie - curse-necurs-part-2
2014-04-02 00:04 necurs Peter Ferrie - curse-necurs-part-1
2014-01-09 07:01 necurs WinNT/Necurs.A : trojan & rootkit | malekal's site
2013-11-20 19:11 necurs @DarkReading / Dark Reading - Large Botnet Comes Back To Life -- With More Malware
2012-12-05 05:12 necurs Microsoft Malware Protection Center - Unexpected reboot: Necurs

Info for parent family:

PublishedFamilyAuthor - Title
2017-12-20 15:12 dridex dvk01uk / Twitter - 943505161296769025
2017-12-05 03:12 dridex Malware-Traffic-Analysis.net - Dridex is back, Baby! - Necurs Botnet malspam pushes Dridex
2017-12-05 03:12 dridex malware_traffic / Twitter - 937890738272178178
2017-08-03 18:08 dridex Dridex AtomBombing in detail « reversingminds's Blog
2017-06-02 09:06 dridex Myonlinesecurity / My Online Security - fake invoice drops word docm with macros delivers Dridex banking Trojan
2017-06-02 08:06 dridex Pastebin - Untitled
2017-04-11 18:04 dridex 2017-04%20Office%20OLE2Link%20zero-day%20v0.4.pdf
2017-04-11 17:04 dridex Genwei Jiang,Rahul Mohandas,Jonathan Leathery,Alex Berry,Lennard Galang / FireEye - CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
2017-04-11 04:04 dridex Proofpoint - Dridex Campaigns Hitting Millions of Recipients Using Unpatched Microsoft Zero-Day
2017-04-10 00:04 dridex Lucian Constantin / CSO Online - Email-based attacks exploit unpatched vulnerability in Microsoft Word
2017-04-08 19:04 dridex Dan Goodin / Ars Technica UK - Booby-trapped Word documents in the wild exploit critical Microsoft zero-day
2017-04-07 23:04 dridex Haifei Li / McAfee Blogs - Critical Office Zero-Day Attacks Detected in the Wild
2017-03-01 09:03 dridex Charlie Osborne / ZDNet - Dridex Trojan updated with AtomBombing evasion techniques
2017-03-01 08:03 dridex @securityaffairs / Security Affairs - Dridex v4, the dreaded malware has been improved with AtomBombing technique
2017-02-28 20:02 dridex Tom Spring / Threatpost | The first stop for security news - Dridex Trojan Gets A Major ‘AtomBombing’ Update
2017-02-28 18:02 dridex Catalin Cimpanu / BleepingComputer - Dridex Becomes First Malware Family to Integrate AtomBombing Technique
2017-02-28 13:02 dridex Magal Baz / Security Intelligence - Dridex's Cold War: Enter AtomBombing
2017-01-27 18:01 dridex Tom Spring / Threatpost | The first stop for security news - Dridex Returns With Windows UAC Bypass Method
2017-01-26 20:01 dridex Flashpoint - Dridex Banking Trojan Returns, Leverages New UAC Bypass Method
2017-01-26 19:01 dridex @flashpointintel / Flashpoint - Dridex Banking Trojan Returns, Leverages New UAC Bypass Method
2017-01-26 12:01 dridex sofia.luis / HubSpot - Dridex Botnets
2016-06-02 22:06 dridex Proofpoint - Dridex – Malicious Macros Add Sandbox Evasion Techniques
2016-05-10 14:05 dridex MalwareTech - Let's Analyze: Dridex (Part 3)
|
2016-04-29 12:04 dridex Brad / SANS Internet Storm Center - Recent Dridex activity
2016-04-21 10:04 dridex Conrad Longmore / Dynamoo - Malware spam: "BalanceUK_INVOICE_X002380_1127878" / adminservices@grouphomesafe.com
2016-04-14 00:04 dridex Proofpoint - New Dridex Botnet Drives Massive Surge in Malicious Attachments
2016-04-13 13:04 dridex Myonlinesecurity / My Online Security - Business Card Tracey Gittens – JS malware leads to Dridex
2016-02-08 16:02 dridex Malware.lu - Dridex decoder
2015-11-02 16:11 dridex markeddoe / CyberSmashup - Dridex static configuration extractor
2015-10-26 12:10 dridex Renaud Tabary / Lexsi Security Hub - DRIDEX + BRUTERES: INSIDE THE DRIDEX SPAM MACHINE
2015-10-23 16:10 dridex Brad / SANS Internet Storm Center - Botnets spreading Dridex still active
2015-10-13 00:10 dridex Brett Stone-Gross - Dridex (Bugat v5) Botnet Takeover Operation
2015-10-01 13:10 dridex Brandon Levene,Rob Downs / Palo Alto Networks - Dridex is Back and Targeting the UK
2015-09-07 00:09 dridex Brian Krebs - Arrests Tied to Citadel, Dridex Malware — Krebs on Security
2015-09-01 20:09 dridex MalwareLu / GitHub - Dridex_config_decoder
2015-07-30 14:07 dridex Renaud Tabary / Lexsi Security Hub - Dridex tests new .lnk email attachments
2015-06-25 10:06 dridex Sylvain Sarméjeanne / Lexsi Security Hub - How Dridex stores its configuration in registry
2015-06-18 00:06 dridex Sudeep Singh,Geok Meng Ong,Joonho Sa,Ronghwa Chong,Shinsuke Honjo / FireEye - Evolution of Dridex
2015-06-15 13:06 dridex McAfee%20Labs%20Threat%20Advisory%20-%20Dridex.pdf
2015-03-26 23:03 dridex Jorge Arias,Yerko Grbic / McAfee - 'Banking' Malware Dridex Arrives via Phishing Email
2015-03-20 17:03 dridex Tom Spring / Threatpost | The first stop for security news - Latest Dridex Campaign Evades Detection with AutoClose Function
2015-03-18 20:03 dridex Ronnie Tokazowski,PhishMe / PhishMe - Dridex Code Breaking – Modify the Malware to Bypass the VM Bypass
2015-02-13 00:02 dridex JPCERT/CC Blog - A New UAC Bypass Method that Dridex Uses
2015-01-07 17:01 dridex Tom Spring / Threatpost | The first stop for security news - Dridex Banking Trojan Spreading Via Office Macros
2014-11-05 00:11 dridex TSPY_DRIDEX.WQJ - Threat Encyclopedia - Trend Micro USA
2013-04-15 09:04 dridex Increase in notifications on Dridex malware infections | www.cert.be
2012-10-19 23:10 dridex jeje - Hunting for Dridex C2 info - Koen Van Impe - vanimpe.euKoen Van Impe – vanimpe.eu
2007-11-22 16:11 dridex Protect yourself against DridexKoen Van Impe – vanimpe.eu

Info for sibling families:

PublishedFamilyAuthor - Title
2017-12-20 15:12 dridex2302 dvk01uk / Twitter - 943505161296769025
2017-12-20 15:12 dridex2302 Myonlinesecurity / My Online Security - Spoofed Companies House secure form malspam delivers a banking trojan
2016-07-01 03:07 dridex38923 mesa_matt / Twitter - 748725697984786432
2016-05-12 00:05 dridex120 Myonlinesecurity / My Online Security - » SPAM MALWARE: We have reviewed your application
2016-05-10 14:05 dridex220 MalwareTech - Let's Analyze: Dridex (Part 3)
|
2016-05-05 00:05 dridex220 Myonlinesecurity / My Online Security - » Someone Might Be Using Your Account – word doc macro malware leads to #Dridex
2016-04-27 07:04 dridex312 Myonlinesecurity / My Online Security - The transfer from your online banking account was cancelled – JS malware attempt
2016-04-19 15:04 dridex220 MalwareTech - Let's Analyze: Dridex (Part 2)
|
2016-04-13 19:04 dridex120 Conrad Longmore / Dynamoo - Malware spam: "Prompt response required! Past due inv. #FPQ479660" / "Jake Gill"
2016-04-11 10:04 dridex220 PC Tech / My Online Security - Emailing: M_20150401_0729_AY56EMF __XLRAE55CF0L324298 – DTC Workshop – word doc macro malware
2016-03-21 16:03 dridex220 MalwareTech - Let's Analyze: Dridex (Part 1)
|
2016-03-16 00:03 dridex120 TechHelpList.com
2016-03-08 22:03 dridex220 niddel / OTX - THL 2016-03-08: Order 1307605 (Acknowledgement)
2016-03-08 11:03 dridex220 TechHelpList.com - Order 1307605 (Acknowledgement) - Malware
2016-03-01 17:03 dridex120 TechHelpList.com - [company] March Invoice #... - Malware
2016-02-24 19:02 dridex220 niddel / OTX - THL 2016-02-24: VAT Invoice - Quote Ref: - British Gas
2016-02-24 14:02 dridex220 TechHelpList.com - VAT Invoice - Quote Ref: - British Gas - Malware
2016-02-16 23:02 dridex220 niddel / OTX - DYNAMOO 2016-02-16: Malware spam: fmis@oldham.gov.uk
2016-02-16 10:02 dridex220 Conrad Longmore / Dynamoo - Malware spam: fmis@oldham.gov.uk / Remittance Advice : Tue, 16 Feb 2016 14:18:52 +0530
2016-02-15 20:02 dridex220 niddel / OTX - THL 2016-02-15: Invoice (w/e 070216) - responserecruitment.co.uk
2016-02-15 15:02 dridex220 TechHelpList.com - Invoice (w/e 070216) - responserecruitment.co.uk - Malware
2016-02-12 22:02 dridex220 niddel / OTX - THL 2016-02-12: Your latest invoice from The Fuelcard Company
2016-02-12 12:02 dridex220 TechHelpList.com - Your latest invoice from The Fuelcard Company UK Ltd - Malware
2016-02-11 23:02 dridex220 niddel / OTX - DYNAMOO 2016-02-11: Dridex 220 Campaign
2016-02-11 15:02 dridex220 Conrad Longmore / Dynamoo - Malware spam: "Your Sage Pay Invoice INV00318132" / Sagepay EU [accounts@sagepay.com]
2016-02-11 12:02 dridex220 Conrad Longmore / Dynamoo - Malware spam: "Scan from KM1650" / "Please find attached your recent scan" / "scanner@victimdomain.tld"
2016-02-11 11:02 dridex220 Conrad Longmore / Dynamoo - Malware spam: "INT242343 Unpaid Invoice - Your Services May Be Suspended" / payments@wavenetuk.com
2016-02-10 23:02 dridex220 niddel / OTX - THL 2016-02-10: Emailing: MX62EDO 10.02.2016 - Malware
2016-02-10 12:02 dridex220 TechHelpList.com - Emailing: MX62EDO 10.02.2016 - Malware
2016-02-09 23:02 dridex220 niddel / OTX - DYNAMOO 2016-02-09: Malware spam: "Accounts"
2016-02-09 10:02 dridex220 Conrad Longmore / Dynamoo - Malware spam: "Accounts" / [accounts_do_not_reply@aldridgesecurity.co.uk]
2016-02-08 22:02 dridex220 niddel / OTX - THL 2016-02-08: Order 155369 (Price Enquiry)
2016-02-08 16:02 dridex120 Malware.lu - Dridex decoder
2016-02-08 12:02 dridex220 TechHelpList.com - Order 155369 (Price Enquiry) - Malware
2016-02-05 21:02 dridex220 niddel / OTX - THL 2016-02-04: Imexpart Limited - Parcels Dispatched
2016-02-04 12:02 dridex220 TechHelpList.com - Imexpart Limited - Parcels Dispatched - Malware
2016-01-12 21:01 dridex220 niddel / OTX - DYNAMOO 2016-01-12: Malware spam: "Payment Advice"
2016-01-12 11:01 dridex220 Conrad Longmore / Dynamoo - Malware spam: "Payment Advice - 0002014343" / Bhavani Gullolla [bhavani.gullolla1@wipro.com]
2016-01-07 13:01 dridex120 TechHelpList.com - Invoice ... - Ibstock-Kevington & Forticrete - Malware
2016-01-06 10:01 dridex120 Conrad Longmore / Dynamoo - Malware spam "Invoice-205611-49934798-CROSSHILL SF"
2015-10-22 16:10 dridex220 Heimdal Security Blog - Analysis: How Malware Creators Use Spam to Maximize Their Impact
2015-10-09 12:10 dridex220 JapieV / OTX - Dridex Botnet 220 - From Techlist
2015-06-24 01:06 dridex120 Christophe Rieunier - In-depth analysis of a dropper of Dridex malware
2015-03-16 16:03 dridex220 TechHelpList.com - Outstanding invoices - [numbers] [month] - Malware
2013-09-13 08:09 dridex38923 Dridex targeting Swiss Internet Users