App Review Locky Ransomware adds a extension .THOR!Demonstration of attack video review.

[GrujaRS]

New Locky adds a extension .thor! Newspapers, infection process follows a unique sound in the background.

 

[DardiM]

Thanks for the share

Antivirus scan for 1fc80672a5ce2a84a95d687725157a69797721a6d19e558d1d8cc59d8e406ef5 at 2016-10-25 20:02:12 UTC - VirusTotal

".odin" ".#####" ".Thor"

=> what will be the next ? all bets are off

=> ".f..k" ?
=> ".zeus" ?​

 

[Dirk41]

Thank you

Wait : so the Smartscreen would have stopped it ?

You should watch the video lol nice

 

[cruelsister]

The Script-Kiddies are just bombarding the place with this one for the past 18 hours or so. Although the initial JScript vector seems to be undetected for a bunch of them, the dropped dll which is responsible for the encryption routine is the same old thing.

Odin and Thor? I want a .yggdradil next.

 

[Dirk41]

The Script-Kiddies are just bombarding the place with this one for the past 18 hours or so. Although the initial JScript vector seems to be undetected for a bunch of them, the dropped dll which is responsible for the encryption routine is the same old thing.

Odin and Thor? I want a .yggdradil next.

Hi! In the video attached we can see smartscreen pop up