Originally published September 5, 2019 · Updated February 16, 2026

Cryptoware, also known as ransomware or crypto-ransomware, is a type of malicious software designed to encrypt files on infected systems and demand payment for decryption. The Locky virus was one of the most notorious examples of this devastating cyberthreat.

What is Cryptoware?

Cryptoware encrypts victims’ files using strong encryption algorithms, making them inaccessible without the decryption key. Attackers then demand ransom payments, typically in cryptocurrency, in exchange for the key to unlock the files.

The Locky Virus: A Case Study

Locky emerged in 2016 as one of the most destructive ransomware variants. It spread primarily through email attachments disguised as legitimate documents. Once executed, Locky would encrypt files and append the .locky extension to affected files.

The virus targeted a wide range of file types, including documents, images, and videos, making it particularly damaging for businesses and individuals alike.

How Cryptoware Spreads

• Email attachments: Malicious files disguised as invoices, documents, or other legitimate attachments
• Infected websites: Drive-by downloads from compromised or malicious websites
• Network vulnerabilities: Exploiting unpatched systems and weak security configurations
• USB devices: Infected removable storage devices

Protection Strategies

• Regular data backups stored offline
• Employee cybersecurity training
• Updated antivirus and anti-malware solutions
• Network segmentation and access controls
• Regular software updates and patches

Cryptoware represents a significant threat to businesses of all sizes. The key to protection lies in implementing comprehensive cybersecurity measures and maintaining current backups to ensure business continuity even in the event of an attack.

Ready to strengthen your cybersecurity? Contact SDTEK for a free assessment.