.LILOCKED File Extension
Lilocked Ransomware Encrypted File
| Developer | N/A |
| Popularity |
2.0 | 3 Votes |
What is a LILOCKED file?
A file with a .lilocked extension is a file that has been encrypted by Lilocked (also known as Lilu) ransomware, a type of malware utilized by cybercriminals. It is encrypted so it is not possible to open the file by simply changing the file extension.
More Information
The purpose of the Lilocked ransomware is to target Linux-based web servers and exploit flaws in software running on the servers, most notably defunct Exim software. After the virus gains root access, it takes files on the servers hostage and forces the server administrators to pay the perpetrator to unlock the files.
The ransomware takes files on the web server hostage by encrypting them and appending the .lilocked extension onto the extensions of the files. For example, a sample.css file becomes sample.css.lilocked.
The ransomware typically does not encrypt server system files, only web-related files, such as .HTML, .CSS, .PHP, and .JS files. After encrypting the files, the virus generates a ransom note (#README.lilocked) in each folder on the server to inform the server administrators about the takeover.
NOTE: LILOCKED files became prevalent in July 2019.
How to open a LILOCKED file
Currently, there is no program available to effectively open or restore LILOCKED files on a server. However, the administrator can restore the server from a previous backup to remove infected files and the Lilocked virus.
Warning
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.