Locky Ransomware

What is Locky ransomware?

Locky ransomware is a type of ransom virus– a piece of malware that encrypts files on your hard drive and requires you to pay a fee to decrypt the files. Locky usually arrives as an email with an attachment that looks like gobbledygook. A message in the document advises you to enable macros if the file appears unreadable. If you do so, the macro runs code that saves the Locky ransomware to your drive and encrypts files that may include Office files, videos and images. To get your files back, the Locky ransomware file advises you to go to a page on the dark web where you'll receive instructions for making payment.

How does Locky ransomware work?

The impact of a Locky ransomware attack can be serious. The virus may encrypt any file it can access in your internal systems and servers. If you are a domain administrator, the Locky ransomware virus can wreak havoc across your entire system. As ransomware attacks continue to make news headlines, organizations are combating ransomware by layering on multiple layers of cybersecurity solutions.

To protect against ransomware like Locky, a full 360 degree solution is often needed, starting with state-of-the-art threat intelligence to block ransomware from common entry points such as email. Today's enterprises also implement security awareness training programs to train their employees to detect ransomware, coupled with powerful cloud archiving solutions to recover data should a breach occur.

How to prevent Locky ransomware attacks

Mimecast offers SaaS-based solutions for email security, archiving and continuity that can detect ransomware and other email-borne attacks and prevent users from inadvertently launching them.

Mimecast's anti ransomware technology is available as a subscription service, enabling you to quickly implement defenses against Locky ransomware. As an all-in-one service, Mimecast also provides protection against a broad range of other threats, including viruses, malware, phishing, spear-phishing and impersonation fraud.

To help you avoid ransomware attacks, Mimecast Targeted Threat Protection includes services to block access to URLs and attachments that may contain Locky ransomware or other viruses. Mimecast scans the URLs in every incoming and archived email, blocking access to websites that may be malicious. Suspicious attachments may be sandboxed until they are deemed safe, or rewritten to a safe format and delivered immediately to users. Mimecast also offers end-user awareness tools that train employees to spot signs of Locky ransomware and other advanced threats.