New malware 'Locky Ransomware' spreading through e-mails, government issues alert

The government on Saturday has issued an alert on spread of new malware 'Locky Ransomware' that can lock computers and demand ransom for unlocking them.

"Alert regarding spam spreading Locky Ransomware issuedtoday by @IndianCERT...," Electronics and IT Additional Secretary Ajay Kumar tweeted.

Ransomware is a malicious software and the Locky Ransomware is learnt to be demanding ransom of half bitcoin, which at present rate is equivalent to over Rs 1.5 lakh.

The alert, issued on Cyber Swachhta Kendra, said it has been reported that a new wave of spam mails is circulating with common subject lines to spread variants of Locky Ransomware.

"Reports indicate that over 23 million messages have been sent in this campaign. The messages contain common subjects like 'please print', 'documents', 'photo', 'Images', 'scans' and 'pictures'.

However, the subject texts may change intargeted spear phishing campaigns," the alert, which described severity of the ransomware as "high", said.

Also Read: Cyber Coordination Centre to detect country's cyber security threats

The system infected by Locky Ransomware is getting locked or encrypted with random numbers with "extension lukitusor diablo6", the alert stated.

The instructions contain installation of "a TOR browser and visiting (dot) onion sites and demanding ransom of .5 Bitcoins", it added.

To target users, spams showing links to fake drop box websites is being used to spread Locky variants.

"Users are advised to exercise caution while opening e-mails and organisations are advised to deploy anti-spam solutions and update spam block lists," the alert stated.

May saw a series of cyber attacks involving ransomware WannaCry.

Also Read: Pak govt website attacked; hackers post Indian national anthem

"Among more than 100 countries that were hit by WannaCry(an advanced ransomware attack), India was the third-worst affected," an Assocham PWC report said.