Merge pull request #94 from Delta-Sierra/master

add lukitus extension to Locky

clusters/ransomware.json

@@ -6482,7 +6482,8 @@
           "([A-F0-9]{32}).thor",
           "([A-F0-9]{32}).aesir",
           "([A-F0-9]{32}).zzzzz",
-          "([A-F0-9]{32}).osiris"
+          "([A-F0-9]{32}).osiris",
+          ".lukitus"
         ],
         "encryption": "AES-128",
         "ransomnotes": [
@@ -6494,7 +6495,9 @@
           "_WHAT_is.html",
           "_INSTRUCTION.html",
           "DesktopOSIRIS.(bmp|htm)",
-          "OSIRIS-[0-9]{4}.htm"
+          "OSIRIS-[0-9]{4}.htm",
+          "lukitus.htm",
+          "lukitus.bmp."
         ],
         "refs": [
           "http://www.bleepingcomputer.com/news/security/new-locky-version-adds-the-zepto-extension-to-encrypted-files/",