NailaoLocker

First seen
2022-06-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 15:00:34

Targeted industries: healthcare-and-pharmaceutical financial-services energy-and-utilities

Context

According to Orange Cybwerdefense, NailaoLocker is a ransomware using AES-256-CTR mode, which conveniently logs its encryption activities into a log file.

Reports & references

  • Trend Micro — Updated Shadowpad Malware Leads To Ransomware Deployment (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Nailao Locker (report)
  • github.com — Nailaoloader Hiding Execution Flow (report)
  • orangecyberdefense.com — Meet Nailaolocker A Ransomware Distributed In Europe By Shadowpad And Plugx Backdoors (report)
  • github.com — Green Nailao (report)

External references