Zyklon
Aliases: GNL Locker, Zyklon Locker
- First seen
- 2016-10-01 00:00:00
- Malware type
- ransomware
- Profile updated
- 2026-07-07 15:43:18
Targeted industries: government-and-public-sector financial-services healthcare-and-pharmaceutical
Context
Zyklon is a ransomware variant belonging to the Hidden Tear family, specifically a GNL Locker variant. It encrypts files on the victim's machine, demanding a ransom for decryption.
Related threat objects
- GNL Locker (malware)
Reports & references
- id-ransomware.blogspot.com — Zyklon Locker Ransomware Windows 250 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Zyklon (report)
- Cisco Talos — Modified Zyklon And Plugins From India (report)
- Mandiant — Microsoft Office Vulnerabilities Used To Distribute Zyklon Malware (report)