GhostLocker Ransomware Analysis

Download Report

GhostLocker is a sophisticated Ransomware-as-a-Service (RaaS) software introduced by hacktivist group GhostSec. Unlike traditional ransomware derivatives, GhostLocker is designed as an enterprise-grade lockdown software that prioritizes security and efficiency.

In this report, in which we analyze the GhostLocker Malware that has recently emerged, we have determined that this software was written by the GhostSec Threat Actor and developed specifically to infect malware and demand ransom against systems targeted by the threat actor.

Key findings include:

GhostLocker's unique selling points include encryption capabilities, military-grade security measures, and a control panel that facilitates the creation of ransomware encryptors and decryptors.
The ransomware encrypts data with the .ghost extension and self-deletes itself when encryption is complete.
Key features include its undetectable nature, strong encryption, and ease of negotiation by the GhostLocker team.
GhostLocker fide software restricts its use in medical or educational systems.
There is no specific country where it is infected, it allows widespread use between various countries and systems.

Relevant Reports

We see the full picture of the evolving cyber threat landscape thanks to unique tools for monitoring the infrastructure used by cybercriminals and data from battlefields: