Investigation Into LockerGoga Ransomware Finds Flaws in the Code. Lockergoga is ransomware that has recently affected some high-profile industrial manufacturers. Some analysts think it spreads within a company by leveraging Active Directory. Some think that it may use the server message block (SMB) protocol, which would mean that the ransomware manually copies files from computer to computer. Palo Alto Networks has found 31 variants of the code thus far, so there is always the possibility that other means may be employed.”]