add lukitus ransomnote to Locky

2017-10-04 09:32:55 +02:00 · 2017-10-04 09:32:55 +02:00 · fa723b6e90
parent 671d7ea456
commit fa723b6e90
1 changed files with 3 additions and 1 deletions
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@ -6495,7 +6495,9 @@
          "_WHAT_is.html",
          "_INSTRUCTION.html",
          "DesktopOSIRIS.(bmp|htm)",
-          "OSIRIS-[0-9]{4}.htm"
+          "OSIRIS-[0-9]{4}.htm",
+          "lukitus.htm",
+          "lukitus.bmp."
        ],
        "refs": [
          "http://www.bleepingcomputer.com/news/security/new-locky-version-adds-the-zepto-extension-to-encrypted-files/",