Netskope Threat Labs

LockCrypt

ATP Sandbox Adv. HeuristicsAV

LockCrypt is a ransomware family that targeted organizations in 2017, often through brute force attacks against remote desktop services. Its operators demanded payment through email rather than a leak site, and the family hit businesses and professional services firms before its campaigns faded.

First seen
May 2022
Last seen
October 2026
Alert Name
Gen:Variant.Ransom.LockCrypt.12
Gen:Variant.Ransom.LockCrypt.7
Generic.Ransom.LockCrypt.3.33DB90B3
Generic.Ransom.LockCrypt.3.D65FD1BC
Generic.Ransom.LockCrypt.3234155C
Generic.Ransom.LockCrypt.CBAB2F3C
Trojan.Ransom.LockCrypt.B
Win32.Ransomware.LockCrypt
Win64.Ransomware.LockCrypt