Once Cryptolocker is in the door, it targets files with the following extensions: exe) and the unwitting user is fooled into thinking the attachment is a harmless PDF file from a trusted sender.

With Windows' hidden extensions feature, the sender simply adds '.pdf' to the end of the file (Windows hides the. The virus is, of course, an executable attachment, but interestingly the icon representing the executable is a PDF file. Usually the virus payload hides in an attachment to a phishing message, one purporting to be from a business copier like Xerox that is delivering a PDF of a scanned image, from a major delivery service like UPS orFedEx offering tracking information or from a bank letter confirming a wire or money transfer.Ĭryptolocker's ransom note to infected users. Many, many organizations are being infected with this malware, but fortunately, there are surefire ways to avoid it and also ways to mitigate the damage without letting the lowlifes win.Ĭryptolocker comes in the door through social engineering. There's a big threat wiling around on the Internet right now: A particularly nasty piece of ransomware called Cryptolocker.

What does crypto locker do