Description
ScreenLocker is a detection name for .NET based ransomware that locks the victim's screen and demands payment rather than only encrypting files in the background. Its full screen blocking behavior makes infections immediately obvious to users, and early interruption usually limits the damage to the machine that ran the payload. Defenders should treat detections as confirmation that a cyberattacker obtained code execution, because screen locking payloads typically arrive through the same loaders and lures as more destructive ransomware.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Also known as
Screenlocker
Alert name variants
| Alert Name |
|---|
| Application.ScreenLocker.C |
| Gen:Variant.Ransom.Screenlocker.11 |
| Win32.Ransomware.Screenlocker |
| Win32.Ransomware.ScreenLocker |