Skip to content
MalwareWiki

Malware

Maktub

According to PCrisk, Maktub is ransomware distributed via zipped Word documents.

Maktub is a Windows malware family.

Background

PCrisk describes Maktub as ransomware spread through zipped Word documents. After the archive is extracted and the document opened, Maktub gains a foothold and encrypts the files on the victim's machine. Each encrypted file receives a .NORV, .gyul (or some other random) extension, making it easy to spot which files have been affected.

Source: Malpedia (Fraunhofer FKIE).