Locky ransomware adds anti sandbox feature
released on 2017-09-01 @ 12:07:41 PM
The Locky ransomware has been very active since its return which we documented in a previous blog post. There are several different Locky campaigns going on at the same time, the largest being the one from affiliate ID 3 which comes with malicious ZIP containing .VBS or .JS attachments.