Netskope Threat Labs

CryptoLocker

ATP Sandbox Adv. HeuristicsAVNetskope IPS

CryptoLocker is an early ransomware family that emerged in September 2013 and set the template for modern file encrypting extortion. It spread through phishing emails and the Gameover Zeus botnet, encrypted documents and other personal files with strong cryptography, and demanded payment within a deadline. Law enforcement disrupted its infrastructure in 2014, but the operation's profitability launched the ransomware epidemic that followed.

First seen
April 2022
Last seen
October 2026
Cryptolocker
Alert Name
ByteCode-MSIL.Ransomware.CryptoLocker
Gen:Variant.CryptoLocker.2
Gen:Variant.CryptoLocker.28
Gen:Variant.CryptoLocker.6
Gen:Variant.Ransom.CryptoLocker.23
Gen:Variant.Ransom.CryptoLocker.25
Gen:Variant.Ransom.CryptoLocker.29
Gen:Variant.Ransom.Cryptolocker.3
Gen:Variant.Ransom.Cryptolocker.32
Gen:Variant.Ransom.Cryptolocker.5