Skip to content
MalwareWiki

Ransomware

LockerGoga

According to Trend Micro, LockerGoga is a ransomware that has been used in multiple attacks, most notably against Altran Technologies and Norsk Hydro.

LockerGoga is a Windows ransomware operated by FIN6.

Background

Trend Micro reports that LockerGoga is ransomware deployed in several incidents, with the campaigns against Altran Technologies and Norsk Hydro being the best known. It targets a variety of documents and source-code files for encryption; however, some builds offered minimal or no whitelisting to spare critical system components such as the Windows Boot Manager.

Source: Malpedia (Fraunhofer FKIE).