Virlock
Aliases: NSMF
- First seen
- 2014-08-01 00:00:00
- Malware type
- ransomware, virus, worm
- Family
- Malware family
- Last IoC activity
- 2026-06-06 18:55:46
- Profile updated
- 2026-07-07 13:40:41
Targeted industries: technology-and-telecommunications retail-and-hospitality financial-services
Context
Virlock is a polymorphic ransomware known for its self-replication capabilities. It encrypts files and demands a ransom while also spreading throughout networks as a worm, making it particularly challenging to eradicate.
Reports & references
- nyxbone.com — Virlock (report)
- ESET — Win32Virlock First Self Reproducing Ransomware Also Shape Shifter (report)
- Trend Micro — Ransomware Recap January 14 29 2017 (report)
- gdatasoftware.com — 31666 Ransomware Identification For The Judicious Analyst (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Virlock (report)
- ciberseguridad.eus — Bcsc Malware Virlock Tlpwhite V1242 (report)
- virusbulletin.com — Vb2015 Paper Its File Infector Its Ransomware Its Virlock (report)
- ESET — Win32Virlock First Self Reproducing Ransomware Also Shape Shifter (report)
- blogs.blackberry.com — Threat Spotlight Virlock Polymorphic Ransomware (report)