AxLocker is a Windows ransomware strain first seen in late 2022. It encrypts files with AES-128 in CBC mode but leaves the original filenames and extensions unchanged. The demand appears in a pop-up window with a countdown timer, a victim ID and an email contact, and no note file is written to disk. It hits personal and small-office Windows machines. Alongside encryption it harvests Discord tokens and basic system details and posts them to a Discord webhook. There is no known leak site.
File extensions: unchanged
Decryptor: Decryptor availability has not been recorded.
The ransomware identification tool didn’t load. This is usually temporary — please refresh. If you’re dealing with an active incident, don’t wait on it:
Emergency response: +1 (877) 364-5161