Dismiss Notice
Welcome to the forum.

If your computer has been locked down by ransomware and you need help, please create an account on our forum and make a post in the Ransomware Help & Support section of the forum.

You can also create an account to talk to other members with similar interests as you (eg. ransomware) or help someone who is having trouble.

Thor Variant of Locky ransomware

Discussion in 'Ransomware News' started by Andrew Aurand, Oct 26, 2016.

  1. TS
    Andrew Aurand

    Andrew Aurand Member

    Joined:
    Sep 3, 2016
    Messages:
    48
    Likes Received:
    9
    Trophy Points:
    8
    Found this today: https://www.tripwire.com/state-of-security/latest-security-news/thor-variant-locky-virus/

    According to /r/sysadmin https://www.reddit.com/r/sysadmin/comments/59boub/locky_ransomeware_variant_thor_is_live/

    My remedial strategy was to block inbound/outbound emails that contain the subject header 'budget forecast' in our filtering service (proofpoint) as well as delete the emails via Exchange ems from user mailboxes. Unfortunately several users fell victim.
    Currently no known decryptor for files of the .thor variant.
     
  2. Sagittarius

    Sagittarius New Member

    Joined:
    Aug 27, 2017
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1

Share This Page