Locky Drops Offline Mode and Switches to New ODIN Extension

Locky, one of today's most dangerous and prevalent ransomware families, next to Cerber and CryptXXX, has gone through yet another update, this time dropping its support for offline mode and adding a new extension for encrypted files.

Back in mid-July, the criminal gang behind the Locky ransomware had released a version of their ransomware that could work without an Internet connection, in a so-called "offline mode."

This Locky version had been distributed via five spam botnets. According to a report from Avira, three of those botnets have now reverted back to distributing a Locky variant that drops support for offline mode, connecting to an online C&C server, like the rest of Locky versions.

"Maybe it didn’t work out as well as expected for the," said Morit...