LockerGoga is ransomware that rose that became known after the attack on Norsk Hydro company in 2019. The decryptor is a joint effort between Bitdefender, Europol, the NoMoreRansom Project, the Zürich Public Prosecutor’s Office and the Zürich Cantonal Police.
LockerGoga is a family of ransomware identified in January 2019 after successful attacks against several companies in the United States and Norway. Its operator, who has been detained since October 2021 pending trial, is part of a larger cybercrime ring that used LockerGoga and MegaCortext ransomware to infect more than 1,800 persons and institutions in 71 countries to cause an estimated damage of $104 million.
Indicators of a LockerGoga infection are the presence of files with a ‘.locked’ extension.
If a company suffered from a LockerGoga attacker it is now possible to use the tool to recover your files for free. There is a step-by-step tutorial on how to operate the decryptor in both single-computer and network modes.
The free decryptor is available from NoMoreRansom and Bitdefender’s website.