Netskope Threat Labs

CobraLocker

ATP Sandbox Adv. Heuristics

CobraLocker is a ransomware family built from source code that leaked on public code repositories. It encrypts files and displays a ransom note, and its public availability means even low skill cyberattackers can rebrand and deploy it against vulnerable targets.

First seen
July 2024
Last seen
October 2026
Alert Name
Document-Word.Ransomware.CobraLocker
Email.Ransomware.CobraLocker
Win32.Ransomware.CobraLocker
Win64.Ransomware.CobraLocker