"Ransomware Eruption: Novel Locker Malware Flows From 'Volcano Demon'"

According to Halcyon researchers, "Volcano Demon" is a double-extortion ransomware player that uses "LukaLocker," a new locker malware, to encrypt victim files with the .nba extension. The attacker installs limited victim logging and monitoring solutions before exploitation. They also make threatening phone calls from "No Caller ID" numbers to extort or negotiate a ransom. This article continues to discuss findings regarding Volcano Demon's attacks.

Dark Reading reports "Ransomware Eruption: Novel Locker Malware Flows From 'Volcano Demon'"

Submitted by grigby1