Threat Landscape Dashboard

Assessing today's threats and the relationships between them

MegaLocker - Ransomware

The ransomware targets NAS storage devices and Samba servers and append either ".crypted" or ".NamPoHyu" to infected files. The malware is known to encrypt remote Samba servers but instead of encrypting locally on the victim’s server the ransomware runs the encryption process at a remote location. The threat actors are demanding between $250 and $1,000 for the decryption key.
Name Modified Date Sources
MegaLocker - Ransomware 2019-04-17