{
  "family": "cryptolocker",
  "sample_count": 10,
  "category": "ransomware",
  "description": "CryptoLocker is an early and influential encrypting ransomware that spread widely from 2013, using strong public-key cryptography to lock victims' files. It was distributed largely via the Gameover Zeus botnet and malicious email attachments. In June 2014 the US Department of Justice announced a joint operation that disrupted both Gameover Zeus and CryptoLocker by seizing servers; Evgeniy Bogachev was identified as a leader of the group behind both schemes and is wanted by the FBI.",
  "cta": "Published by the SystemHelpdesk team.",
  "aliases": [
    "CryptoLocker"
  ],
  "enrichment_level": "curated_sourced",
  "faq": [
    {
      "@type": "Question",
      "name": "What is CryptoLocker?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "An influential encrypting ransomware, prominent from 2013, that locked files with strong cryptography and demanded payment for the decryption key."
      }
    },
    {
      "@type": "Question",
      "name": "Why is CryptoLocker historically important?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "It popularized the modern 'encrypt files and demand cryptocurrency' ransomware model that many later families copied."
      }
    },
    {
      "@type": "Question",
      "name": "How did CryptoLocker spread?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Largely through the Gameover Zeus botnet and malicious email attachments."
      }
    },
    {
      "@type": "Question",
      "name": "How was CryptoLocker disrupted?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "In June 2014 a US Department of Justice operation seized servers used by CryptoLocker and disrupted the related Gameover Zeus botnet."
      }
    },
    {
      "@type": "Question",
      "name": "Who was behind CryptoLocker?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "The DOJ identified Evgeniy Bogachev as a leader of the group responsible for both CryptoLocker and Gameover Zeus; he is wanted by the FBI."
      }
    },
    {
      "@type": "Question",
      "name": "How can I protect against ransomware like CryptoLocker?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Keep antivirus/anti-malware updated, avoid unknown email attachments, patch your system, and keep tested offline backups."
      }
    },
    {
      "@type": "Question",
      "name": "Where can I read an authoritative source on CryptoLocker?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Malwarebytes Labs published an overview of CryptoLocker, linked on this page."
      }
    }
  ],
  "faq_count": 7,
  "mitre_attack": [
    "T1486",
    "T1566.001",
    "T1083",
    "T1490",
    "T1071.001"
  ],
  "cisa_advisory": null,
  "last_updated": "2026-06-09",
  "sources": [
    {
      "name": "Malwarebytes Labs: CryptoLocker ransomware",
      "url": "https://www.malwarebytes.com/blog/news/2013/10/cryptolocker-ransomware-what-you-need-to-know"
    }
  ],
  "target_industries": [
    "Global / Opportunistic"
  ],
  "motivation": "Opportunistic",
  "threat_actors": [
    "Unknown / Cybercriminal"
  ],
  "target_geographies": [
    "Global"
  ]
}