Ransomware Basics
What is locker ransomware?
Locker ransomware locks a user out of a device or operating system — for example, by blocking the login screen — without necessarily encrypting individual files. It is usually less destructive than crypto ransomware because the underlying data may remain intact.
Recovery usually involves removing the lock and restoring access, with clean backups available as a fallback if data is affected.
Last updated
Related terms
Prove your recovery
See the evidence behind the decision.
Pursuit investigates compromise and guides response. Hunt provides evidence to assess recovery candidates.