Locky_FakeGlobe - description

Source:

Locky ransomware distributed with FakeGlobe through upgraded spam campaigns

Locky is ransomware that spreads globally through spam email. In this specific campaign, attackers distribute Locky alongside another ransomware called FakeGlobe. The attackers rotate between these two ransomware variants from a single distribution link.

Flowmon ADS detects both direct links and redirects used to download this ransomware.