FantomCrypt
- First seen
- 2016-08-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 15:01:03
Context
According to PCrisk, Fantom is a ransomware-type virus that imitates the Windows update procedure while encrypting files. This is unusual, since most ransomware encrypts files stealthily without showing any activity. During encryption, Fantom appends the names of encrypted files with the ".locked4", ".fantom" or ".locked" extension.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Fantomcrypt (report)
- webroot.com — Fantom Ransomware Windows Update (report)