What Is Ragnar Locker Ransomware?

Ragnar Locker ransomware is a recent, pesky form of malware which particularly targets machines operating on Windows. First discovered in late 2019, this ransomware was devised as a way of attacking compromised corporate networks.

What Is Ragnar Locker Ransomware, And How Does It Work?

Cybercriminals looking to deploy Ragnar Locker ransomware first compromise their target’s network, then attempt to crack weak passwords or employ stolen credentials purchased from the Dark Web. Throughout this process, the ransomware terminates critical programs which managed service providers use to manage and protect their clients’ important IT data.

Once in, the attackers inject software into the victim’s machine which grabs sensitive data and uploads it via a network connection to their servers. Just like that, their work is done, and the Ragnar Locker ransomware is in place. Attackers proceed to let victims know that their files will be released to the public if the specified ransom amount is not paid. This dual-pronged approach to obtaining your valuable data on clients and partners is what’s known as a “double extortion” tactic.

So, Who Are These Ragnar Locker Hackers, Anyway?

The identity of the Ragnar Locker ransomware hackers has eluded entities like the FBI. According to the FBI, the ransomware actually ceases execution in the event that a victim’s machine is configured as a former country of the USSR, such as Russia and Ukraine. It’s currently unknown whether this is related to the whereabouts of this particular hacker group.

How Do I Defend Against Ragnar Locker Ransomware?

That was a shotgun blast of info all at once. So, let’s recap: what is Ragnar Locker ransomware? Simply put, it’s a massive, undeterred threat to confidential enterprise data and the networks this data passes through.

But knowing is only half the battle. Preparing yourself to quickly and efficiently spot signs of Ragnar Locker threats before the ransomware takes hold is critical to protecting against this threat. By following these comprehensive steps, you and your organization will be ready and alert against Ragnar Locker ransomware threats:

1. Never open suspicious email attachments or web links—if it seems strange, follow your intuition and alert your IT department.
2. Install a constantly running antivirus software solution throughout your enterprise, with auto-updates turned on.
3. Update enterprise software and hardware (operating systems, network devices, phones, etc.) for security.
4. Establish a regularly tested data backup and recovery procedure—and make sure your IT department sticks to it!
5. Conduct tests checking for ransomware preparedness at the enterprise level.
6. Restrict access to shared drives and disable file sharing, since most ransomware tries to access your shared drives and encrypt the files in them to lock the user/enterprise out of their data.
7. Disable any and all remote services which can provide hackers an easier gateway into your enterprise network.
8. Implement company-wide security awareness training to improve organizational education of critical cybersecurity threats and awareness.

To date, victims such as Capcom and Dassault Falcon Jet have answered “what is Ragnar Locker ransomware?” the hard way by having their information published on the Dark Web. Remember: just like with other forms of ransomware, any and everybody can easily search the Dark Web to access the data—and who knows what that sort of person would do with it?

Don’t Be A Victim Of Data Compromise—Protect Yourself With SiteLock

Now that you have a better understanding of Ragnar Locker ransomware, you are ready to properly defend against the ongoing threat of cybercriminals. Want to know more about ransomware? Read “What Is Ransomware?” to learn more about how hackers hold sites hostage—and which four steps can ensure yours will be protected.