ProLock
- ID
- S0654
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 18 Nov 2024
ProLock is a ransomware strain that has been used in Big Game Hunting (BGH) operations since at least 2020, often obtaining initial access with QakBot. ProLock is the successor to PwndLocker ransomware which was found to contain a bug allowing decryption without ransom payment in 2019.[1]
Techniques used (7)
- T1027.003 Steganography
- T1047 Windows Management Instrumentation
- T1068 Exploitation for Privilege Escalation
- T1070.004 File Deletion
- T1197 BITS Jobs
- T1486 Data Encrypted for Impact
- T1490 Inhibit System Recovery