Cryptoshocker

CryptoShocker is a ransomware that infiltrates computers and encrypts stored files. This virus adds the .locked extension to the name of each encrypted file. The targeted file types include .jpeg, .doc, .mp3 and many others. After successfully encrypting data, CyptoShocker creates a shortcut (called ATTENTION.url) to its Tor website and places it on the victims' desktop. The website contains a message that the victim's files have been encrypted. CryptoShocker uses an asymmetric AES encryption algorithm, and therefore both public (encryption) and private (decryption) keys are generated during this process.