AXLocker ransomware doesn't change files' extensions

AXLocker is a ransomware that was found by malware researcher ‘S!ri,’ who posted it on Twitter. Later, it was discovered that AXLocker does not only encrypt files but also steals victims’ Discord credentials and uploads them to its own Discord server. Specifically, the AXLocker ransomware steals tokens stored on a local computer when the user logs in to Discord. It’s not packed or obfuscated.

Ransomware Detection by Watching for Common File Extensions

Virus has changed all file extensions on my Windows 10 PC

Scarab Ransomware Spreads Worldwide with the Help of Spacecolon Toolset

What should I do some virus change extension of my computer all files have been changed to .nuksus and add _readme.txt file in all folders? - Quora

AXLocker ransomware doesn't change files' extensions

AxLocker: A new wave of ransomware attacks targeting Discord Servers

How to Detect Ransomware with FileAudit - Enterprise Network Security Blog from IS Decisions

How to Fix Virus Has Changed All File Extensions on Windows PC? - MiniTool

Latest Variant of Yashma Ransomware Targets Several English-Speaking Nations

AXLocker Ransomware - Decryption, removal, and lost files recovery (updated)

AXLocker ransomware doesn't change files' extensions

How to respond to a ransomware attack as an MSP

Researchers Disclosed About High-Severity Format String Vulnerability Present in F5 BIG-IP