Locky

Locky is a ransomware Trojan sent via email and presented as an invoice that needs to be opened with Microsoft Word. At first glance, the document appears unreadable and asks the user to activate macros. Once the macros are activated, Locky downloads a program to the computer to automatically encrypt all data. The user is then asked to download Tor and visit a specific site to get instructions on how to unlock their files. A payment of a variable amount in bitcoins is then requested.