A new ransomware group has been discovered harassing its victims on the phone until they pay up. 

A report from anti-ransomware company, Halycon said that Volcano Demon was seen going after “several” targets in the last couple of weeks, deploying a new encryptor called LukaLocker. 

Its methodis relatively simple – the threat actor will first find a way into the target network, map it out, and then exfiltrate as many sensitive files as they can. Then, they will deploy the encryptor, lock down the files and entire systems, and then demand payment in cryptocurrency in exchange for the decryption key, and for keeping the files for themselves.

No data leak site

LukaLocker will add encrypted files the .nba file extension. It works on both Windows and Linux devices, it was said. The encryptor was also relatively good at hiding its tracks. Since it clears logs prior to exploitation, cybersecurity researchers cannot conduct a full forensic evaluation. 

The victims having limited logging and monitoring solutions installed didn’t help, either. Finally, LukaLocker can disable the processes linked to most popular antivirus and anti-malware solutions.

While all of this is relatively similar to what other ransomware actors are doing, there is one key difference – Volcano Demon does not have a dedicated data leak site. Instead, it will call the leadership of the victim company on the phone to try and negotiate a payment. All calls come from an unidentified caller-ID numbers and can, the researchers stress, be threatening in both tone and expectations.

More from TechRadar Pro

Go to Source

Follow us on FacebookTwitter and InstagramWe are growing. Join our 6,000+ followers and us.

At TechRookies.com will strive to help turn Tech Rookies into Pros!

Want more articles click Here!

Deals on Homepage!

M1 Finance is a highly recommended brokerage start investing today here!

WeBull. LIMITED TIME OFFER: Get 3 free stocks valued up to $6300 by opening & funding a #Webull brokerage account! “>Get started >Thanks for visiting!

Subscribe to our newsletters. Here! On the homepage

Tech Rookies Music Here!

Disclaimer: I get commissions for purchases made through links in this post at no charge to you and thanks for supporting Tech Rookies.

Disclosure: Links contain affiliates. When you buy through one of our links we will receive a commission. This is at no cost to you. Thank you for supporting Teachrookies.com

Disclaimer: This article is for information purposes and should not be considered professional investment advice. It contains some forward-looking statements that should not be taken as indicators of future performance. Every investor has a different risk profile and goals. All investments have risks. Always do your own research or hire an expert before investing and trading.