InLock Ransomware Includes Ransom Note in Spanish
InLock is the name of a newly discovered ransomware variant. The new strain does not belong to any larger family.
InLock will encrypt practically every file on the victim system, leaving only OS files intact. File types that will be encrypted include program executables, document files, image and media files, archives and databases.
Once files are encrypted, they receive the ".inlock" extension, which also serves as the ransomware's name.
The ransomware creates a ransom note called "READ_IT.txt" and also changes the system's wallpaper to an image with a padlock and a stylized cryptocurrency icon on it. The full ransom note goes as follows:
¡¡¡TU EQUIPO HA SIDO CIFRADO!!!
Lo sentimos mucho, pero has sido objectivo de un ciberataque.
Todos tus datos personales han sido cifrados. Ponte encontacto conmigo para negociar el rescate.
Una vez me llegue el pago, te haré llegar la herramienta encargada de descifrar todos los ficheros.
Espero que no tengas nada de gran valor 😉
El siguiente código no lo pierdas o no podrás recuperar nunca más tus datos:
[alphanumeric string]
There is currently no known decryption tool for the InLock ransomware, so your best bet is to keep offline backups of important files.
