Skip to content
MalwareWiki

Ransomware

LokiLocker

LokiLocker is a .Net ransomware, which was seen first in August 2021.

LokiLocker is a Windows ransomware.

Background

LokiLocker is a .Net ransomware first observed in August 2021. It is shielded by NETGuard (a modified version of ConfuserEX) together with the KoiVM virtualization plugin. According to BlackBerry, its victims are spread across the globe, though most are concentrated in Eastern Europe and Asia.

Source: Malpedia (Fraunhofer FKIE).